User Authentication for Web Services

Hi,

I am developing a web services that resides in Intranet.Thus, would like to implement application layer of user authetication, i.e. to match the input user name and password against Database record through a web service logon() method. If authentication is passed, the client program is allowed to call subsequence web service methods, else exception needs to be thrown when calling subsequence methods.

As understand that each method call to web services is treated seperately. Thus, how can we implement the authentication so that the client program only passes in the user name and password at once through logon() method, instead of perfoming the authentication for each method?

Appreciate the advice.Thanks.

[741 byte] By [mysdnida] at [2007-10-2 8:57:34]
# 1
Hi,You can have an EJB as your webservices and define security-roles for method level in the deployment descriptor.Thanks
ramkumarmsca at 2007-7-16 23:01:45 > top of Java-index,Security,Other Security APIs, Tools, and Issues...
# 2

Hi,

But, I need to develop the web services logon method using WSDL which generated the LogonBindingImpl.java, instead of web services using EJB bean.

Besides, the Web Service logon method (LogonBindingImpl.java) need to accept the input user name and password to check with the user name and password that stored in database table through the EJB bean. If checking successful, client program is allowed to invoke other WebServices method, else login failed exception need to be thrown when client calling other web services methods.

Appreciate the advice here on how to achieve that. Thanks.

mysdnida at 2007-7-16 23:01:45 > top of Java-index,Security,Other Security APIs, Tools, and Issues...
# 3
Hi,Appreciate if any expert can advise me for the solution.Thanks in advance.Regards,
mysdnida at 2007-7-16 23:01:45 > top of Java-index,Security,Other Security APIs, Tools, and Issues...
# 4

Any expert can advise me on how to implement the below? Thanks in advance.

A Web Service logon method (LogonBindingImpl.java) need to accept the input user name and password to check with the user name and password that stored in database table through the EJB bean. If checking successful, client program is allowed to invoke other WebServices methods, else login failed exception need to be thrown when client calling other web services methods.

mysdnida at 2007-7-16 23:01:45 > top of Java-index,Security,Other Security APIs, Tools, and Issues...