简体繁体 English

REST和SOAP Web服务安全性以及基于角色的身份验证和JBoss中的登录

[英]REST and SOAP web service security with role based authentication and login in JBoss

原文 2015-12-01 21:59:38 3 1 java/ java-ee/ jboss/ ws-security

I want to implement role based authorization and identity in my web services. 我想在我的Web服务中实现基于角色的授权和身份。 i it's the first time i try to do this with j2ee. 我是我第一次尝试使用j2ee做到这一点。 i am running jboss 6.4 nad j2ee 7. what ia, trying to understand : 我正在运行jboss 6.4 nad j2ee 7.什么，例如，试图理解：

1- how to implement role based security. 1-如何实现基于角色的安全性。 My web services will expose methods with certain security levels that are to be available to certain roles. 我的Web服务将公开具有某些安全级别的方法，这些方法可用于某些角色。

2- how to authenticate users of my web services given that the front end is HTML5 JS (mostly react and some pure JS) 2-假设前端是HTML5 JS（主要是React和一些纯JS），如何对我的Web服务的用户进行身份验证

3- how to throw encryption of soap envelopes and https in the mix 3-如何在混合中对肥皂信封和https进行加密

4- if i have a users DB, what type of security mechanisms or frameworks can i use in j2ee to enable role based security. 4-如果我有一个用户数据库，我可以在j2ee中使用哪种类型的安全性机制或框架来启用基于角色的安全性。

I appreciate if someone could give an example or point me to somewhere where i can read preferably sample code 我很高兴有人能给我一个例子或指出我可以阅读示例代码的地方

1 个解决方案

JBoss runs good with Picketlink . JBoss在Picketlink上运行良好。 This framework can give you all security features you're looking for. 该框架可以为您提供所需的所有安全功能。