Lets how we can secure a WSO2ESB proxy service using HTTP Basic Authentication. Step 1. Creates a simple proxy service in WSO2ESB. Here i am using the same “echo” service in same WSO2ESB as the BE service. If not, you can start new WSO2ESB instance and use “echo” service as your BE service. Simple flow […]
Category: ESB
Enterprise service bus
In my previous post, we discussed how we can invoke a user name token secured BE service. Let see, how we could invoke a Basic auth secured service using ESB. This is more easier as we just want to configure ESB property mediator to add Basic authentication header in to out going messages. However […]
Lets say, we have a backend web service that has been secured with Username Token security policy and user name token must be sent to access it. But your client application (which is not in this domain), would send user name and password in different manner (not in Username token). Therefore client would not be able to talk […]
WSO2 ESB is a popular proxy service engine that you can use to proxy the backend services and expose them as SOAP based web services. It provides QoS for proxy services that you can apply WS-Security policies in an easier manner. There are several pre-defined WS-Security policies in the ESB, that you can apply for […]
WSO2 ESB gives an extension points, where users can create their own processing logic in to the message path. One way is implementing a custom mediator (class mediator) where it can be plugged with ESB sequences. We can found lot of docs and blogs on writing a custom mediators. But I just like to summarize all […]
This is my second blog post about enabling mutual SSL for ESB proxy services. In my previous blog post, we enabled mutual SSL for all deployed proxy services. But in this blog post, we are going to enable mutual SSL for only selected proxy services. Let assume we have proxy service call “TestProxy” and also there are many […]
Lets see how we can enable mutual SSL (two-way SSL) for all the proxy services that are deployed in WSO2 ESB Configuring Mutual SSL in ESB Step 1 : Enable mutual SSL for transport receiver of the WSO2 ESB WSO2 ESB uses Pass through transport (or NIO ) for sending and receiving messages. You can […]
Most of web services have been secured using various WS-security methods. Therefore we need to implements clients that support WS-Security to invoke these web services. If you are using Rampart or WSS4J for WS-Security for processing in client side, you may need to create a password callback class for following 1. Get the password to […]