SRP authentication

[Jens]

Hi list,

does CXF include support for authentication via SRP (Secure Remote
Password)?

I need to consume a SOAP service that is protected via Amazon AWS SRP.
Ideally, I'd simply like to do that via WS-Pol, of course, but I can't find
any documentation about whether there's support for something like this out
of the box, or whether I'd have to write that myself.

I would hope that AWS isn't that exotic anymore, however, and there's at
least some foundation that could be built upon.

Thanks,
Jens



--
Sent from: http://cxf.547215.n5.nabble.com/cxf-user-f547216.html

[Colm O hEigeartaigh]

Hi,

There isn't any support in CXF for SRP using WS-Policy or otherwise, as far
as I'm aware. Do you have a link to some documentation about how SRP would
work with SOAP messages?

Colm.

Post by Jens
Hi list,
does CXF include support for authentication via SRP (Secure Remote
Password)?
I need to consume a SOAP service that is protected via Amazon AWS SRP.
Ideally, I'd simply like to do that via WS-Pol, of course, but I can't find
any documentation about whether there's support for something like this out
of the box, or whether I'd have to write that myself.
I would hope that AWS isn't that exotic anymore, however, and there's at
least some foundation that could be built upon.
Thanks,
Jens
--
Sent from: http://cxf.547215.n5.nabble.com/cxf-user-f547216.html

[Jens]

Hi Colm,

at the moment I only have (confidential) high-level documentation that
basically says

- use the AWS SDK to make an authentication request (-> ID token and access
token)
- add the ID token as an HTTP header to the SOAP request
- add the ID token and the access token as SOAP headers to the SOAP request

Cheers,
Jens

Post by Colm O hEigeartaigh
Hi,
There isn't any support in CXF for SRP using WS-Policy or otherwise, as far
as I'm aware. Do you have a link to some documentation about how SRP would
work with SOAP messages?
Colm.
On Wed, Sep 12, 2018 at 12:43 PM Jens <

Post by Jens
Hi list,
does CXF include support for authentication via SRP (Secure Remote
Password)?
I need to consume a SOAP service that is protected via Amazon AWS SRP.
Ideally, I'd simply like to do that via WS-Pol, of course, but I can't find
any documentation about whether there's support for something like this out
of the box, or whether I'd have to write that myself.
I would hope that AWS isn't that exotic anymore, however, and there's at
least some foundation that could be built upon.
Thanks,
Jens

--
Sent from: http://cxf.547215.n5.nabble.com/cxf-user-f547216.html

[Colm O hEigeartaigh]

Hi Jens,

OK well it should be straightforward to do both of those things with a CXF
interceptor. If there were some public/official documentation we could
consider adding it to CXF.

Colm.

Post by Jens
Hi Colm,
at the moment I only have (confidential) high-level documentation that
basically says
- use the AWS SDK to make an authentication request (-> ID token and access
token)
- add the ID token as an HTTP header to the SOAP request
- add the ID token and the access token as SOAP headers to the SOAP request
Cheers,
Jens

Post by Colm O hEigeartaigh
Hi,
There isn't any support in CXF for SRP using WS-Policy or otherwise, as far
as I'm aware. Do you have a link to some documentation about how SRP

would

Post by Colm O hEigeartaigh
work with SOAP messages?
Colm.
On Wed, Sep 12, 2018 at 12:43 PM Jens <

Post by Jens
Hi list,
does CXF include support for authentication via SRP (Secure Remote
Password)?
I need to consume a SOAP service that is protected via Amazon AWS SRP.
Ideally, I'd simply like to do that via WS-Pol, of course, but I can't find
any documentation about whether there's support for something like this out
of the box, or whether I'd have to write that myself.
I would hope that AWS isn't that exotic anymore, however, and there's at
least some foundation that could be built upon.
Thanks,
Jens

--
Sent from: http://cxf.547215.n5.nabble.com/cxf-user-f547216.html

[Jens]

Hi Colm,

yes, that's what I did now.

I'm actually not sure whether the way to use this stuff with SOAP is some
sort of standard or just a one-off project with a home-grown authentication
scheme.

In case I do get something official and public I'll let you know.

Cheers,
Jens

Post by Colm O hEigeartaigh
Hi Jens,
OK well it should be straightforward to do both of those things with a CXF
interceptor. If there were some public/official documentation we could
consider adding it to CXF.
Colm.
On Thu, Sep 13, 2018 at 3:24 PM Jens <

Post by Jens
Hi Colm,
at the moment I only have (confidential) high-level documentation that
basically says
- use the AWS SDK to make an authentication request (-> ID token and access
token)
- add the ID token as an HTTP header to the SOAP request
- add the ID token and the access token as SOAP headers to the SOAP request
Cheers,
Jens

Post by Colm O hEigeartaigh
Hi,
There isn't any support in CXF for SRP using WS-Policy or otherwise, as far
as I'm aware. Do you have a link to some documentation about how SRP

would

Post by Colm O hEigeartaigh
work with SOAP messages?
Colm.
On Wed, Sep 12, 2018 at 12:43 PM Jens <

Post by Jens
Hi list,
does CXF include support for authentication via SRP (Secure Remote
Password)?
I need to consume a SOAP service that is protected via Amazon AWS SRP.
Ideally, I'd simply like to do that via WS-Pol, of course, but I can't find
any documentation about whether there's support for something like

this

Post by Colm O hEigeartaigh

Post by Jens
out
of the box, or whether I'd have to write that myself.
I would hope that AWS isn't that exotic anymore, however, and there's

at

Post by Colm O hEigeartaigh

Post by Jens
least some foundation that could be built upon.
Thanks,
Jens

--
Sent from: http://cxf.547215.n5.nabble.com/cxf-user-f547216.html