WS-Security Sample on UsernameToken and Timestamp

This sample demonstrates how WS-Security support in JAX-WS services is enabled.

WS-Security can be configured to the client and server endpoints by adding WSS4JInterceptors. Both server and client can be configured for outgoing and incoming interceptors. Various actions like, Timestamp, UsernameToken, Signature, Encryption, etc., can be applied to the interceptors by passing appropriate configuration properties.

The logging feature is used to log the inbound and outbound SOAP messages and display these to the console. In all other respects, this sample is based on the basic hello_world sample.

The samples in this directory use STRONG encryption. The default encryption algorithms included in a JRE are not adequate for these samples.

For the sample, the Java Cryptography Extension (JCE), Unlimited Strength Jurisdiction Policy Files available on Oracle's JDK download page must be installed from here: (http://www.oracle.com/technetwork/java/javase/downloads/index.html); otherwise, there will be errors on invalid key lengths.

Building and running the sample

This sample can be found at <AS_HOME>\samples\Jaxws-Jaxrs\ws_security\ut

For information on building and running the sample, see Building and Running JAX-WS Samples.