Web Service Security for Java

EAServer 6.2 implements the Web Service Security (WS-Security) specification with Web Services Security for Java (WSS4J) framework to secure Web services. WSS4J includes special support for Axis and can be deployed in any application server.

WSS4J includes preconfigured handlers that you can use to integrate with Axis-based Web services. WSDoAllSender and WSDoAllReceiver are the main Axis handlers for creating and interpreting secure SOAP requests.

To add a WS-Security layer to the Web service, add WSDoAllSender and WSDoAllReceiver handlers to a Web Service Deployment Descriptor (.wssd) file. The WSSD provides the specified information to control the security processing.