Chang Sau Sheong
2006-Mar-31 04:33 UTC
[Rails] How to secure web services created by ActionWebService?
Hi, Does anyone know how I can go about securing web services created from ActionWebService? The manual from rubyonrails.org (http://manuals.rubyonrails.com/read/book/10) doesn''t say anything at all on this ... or do I have to implement my own access control? -- Sau Sheong http://www.saush.com http://read.saush.com http://jaccal.sourceforge.net -------------- next part -------------- An HTML attachment was scrubbed... URL: http://wrath.rubyonrails.org/pipermail/rails/attachments/20060331/17d17262/attachment.html
Roland Schmitt
2006-Mar-31 07:07 UTC
[Rails] How to secure web services created by ActionWebService?
Hi, Chang Sau Sheong wrote:> Hi, > > Does anyone know how I can go about securing web services created from > ActionWebService? The manual from rubyonrails.org > (http://manuals.rubyonrails.com/read/book/10) doesn''t say anything at > all on this ... or do I have to implement my own access control? > > > > > ------------------------------------------------------------------------ > > _______________________________________________ > Rails mailing list > Rails@lists.rubyonrails.org > http://lists.rubyonrails.org/mailman/listinfo/railsyou can either use SSL to encrypt the data or a library like WSS4R (www.rubyforge.org/projects/wss4r) that implements web service security mechanisms like signature and encryption as defined by the Oasis Consortium. WSS4R is tested with other WS-Security packages like WSE from MS (for .NET) or JWSDP from Sun (for Java). Regards, Roland
Chang Sau Sheong
2006-Apr-01 01:36 UTC
[Rails] How to secure web services created by ActionWebService?
Thks! I''ll take a look at the WSS4R library. Roland Schmitt wrote:> Hi, > > Chang Sau Sheong wrote: >> Hi, >> >> Does anyone know how I can go about securing web services created from >> ActionWebService? The manual from rubyonrails.org >> (http://manuals.rubyonrails.com/read/book/10) doesn''t say anything at >> all on this ... or do I have to implement my own access control? >> >> >> >> >> ------------------------------------------------------------------------ >> >> _______________________________________________ >> Rails mailing list >> Rails@lists.rubyonrails.org >> http://lists.rubyonrails.org/mailman/listinfo/rails > > you can either use SSL to encrypt the data or a library like WSS4R > (www.rubyforge.org/projects/wss4r) that implements web service > security mechanisms like signature and encryption as defined by the > Oasis Consortium. WSS4R is tested with other WS-Security packages like > WSE from MS (for .NET) or JWSDP from Sun (for Java). > > Regards, > Roland >-- Sau Sheong http://www.saush.com http://read.saush.com http://jaccal.sourceforge.net