publicly available java secure web service - web-services

I am trying to write a web service client using Jax-ws for a secured webservice hosted by a third party. While doing so, I am facing a lot of issues and somehow wanted to find out if the issue is with my client or the hosted web service.
Do we have any publicly available and free secure web services on the internet? I can find many non secure services.

Have a look at this URL:
http://www.webservicex.net/ws/wscatlist.aspx
... where you can find a bunch of published webservices.

Related

How to connect to a site's endpoints with wcf client

I need to connect to a site's endpoints and call it's methods.
Is it possible to do this creating a WCF Client?
I don't know which technology is used by the site for it's
web services. I have only been given the endpoints to communicate.
If you know the local address and port as well as the name of the service, the procedure is the same as the WCF Web service.

OAuth2 in web application connecting to multiple REST services?

How do I set up a web application with OAuth2 authentication, where the web application connects to two underlying REST services (through client-side JavaScript from the user's browser)?
I am controlling all servers, and I need to make sure that nobody accesses the web application and the REST services without authentication.
How should this be done?
Should I configure all three servers (the web application and the two REST services) using a single application id?
BTW:I plan to use IdentityServer4 as the authentication server.
Best regards,
Morten :-)

Google App Engine - JBoss authentication

I have a web service hosted in a JBoss AS. Add a app running on Google App Engine. Now I want to access my web service hosted in JBoss AS only by my App Engine app and I want to restrict others from accessing my web service. How can I do that? Please help.
Use the AppEngine URL Fetch Service to call your JBoss web services from your AppEngine app. Use the HTTPS option to secure the network connection. Furthermore create request headers and payload such as to satisfy whatever JBoss security requirements you can establish between JBoss and AppEngine (for example client user authentication).

How to Secure the EJB3.0 Stateless Session Bean Web Services

I exposing EJB3.0 stateless session bean as web service using JAX-WS annotations and right now I'm using JBOSS5.1.0 GA as application server and JBOSSWS is generating the WSDL for me when I deploy the EAR.
Now I want to secure the web services by providing authentication and encryption-decryption on the SOAP messages. How do I can achieve that, Is there any annotations available for both in JAX-WS (or) can I achieve by doing any configuration at EJB level. I do not want to do secure web services with respect to JBOSS, because I want to deploy the same EAR in different application as well.
So please help me to build the generic EJB3.0 web services bean with the security implementation ., Thanks a lot in advance
Concerning SOAP WebServices, you can a lot of posts in this forum related to your question. In particular in User authenticate in SOAP I've mentioned that there several ways to authenticate the client.
Supposing that you want to authenticate the client by X.509 certificate. Then:
For JBossWS refer WS-SecurityOptions – X509 Certificate Token
For Metro/JAX-WS services refer Using JAX-WS-Based Web Services with SSL
For Apache CXF refer WS-Security
For Spring Security refer Spring Security With X.509 Certificate

How to find simple secured web services online?

I am trying to write a test code against some secured web service.
So, I've searched the web for some (https) web service to write the client against but didn't find.
I've looked in one or more UDDI but without any results.
If I'm not mistaken, a bunch of Amazon Web Services ( http://aws.amazon.com ) have HTTPS endpoints. Also, you can try searching on http://www.programmableweb.com