J2EE™ Security for Servlets, EJBs and Web Services: Applying Theory and Standards to Practice

WS Security with Apache Axis

How can we use WS Security with Apache Axis? As we saw, VeriSign's WS Security API works on SOAP messages whereas you usually don't work with SOAP messages while using Axis client library or writing a service. If you look at the EchoClient.java file, what you find is a Java Object as argument and a Java Object as return value. Likewise, at the service end, you work with the Java objects. We know that Axis libraries convert the Java objects into SOAP messages at the transmitting end and SOAP messages into Java objects at the receiving end. As WS Security protects SOAP messages, we must have some way of accessing and modifying a SOAP message after the conversion at the transmitting end and before the conversion at the ...