Network Deployment (Distributed operating systems), v8.0 > Secure applications and their environment > Secure web services > Secure web services
Securing JAX-WS web services using message-level security
Web Services Security standards and profiles address how to provide message-level protection for messages that are exchanged in a web service environment.Before you begin this task, develop and deploy a JAX-WS application. See the topic "JAX-WS" for more information. JAX-WS
JAX-WS is the next generation web services programming model complimenting the foundation provided by JAX-RPC. Using JAX-WS, development of web services and clients is simplified with greater platform independence for Java applications through the use of dynamic proxies and Java annotations. JAX-WS simplifies application development through support of a standard, annotation-based model to develop web service applications and clients. A required part of the Java Platform, Enterprise Edition 5 (Java EE 5), JAX-WS is also known as JSR 224.
JAX-WS applications can be secured with Web Services Security in one of two ways. The application can be secured using policy sets, or through the use of the Web Services Security API (WSS API). The WSS API can only be used to secure a JAX-WS client application. The following sections describe both methods.
Procedure
- Learn about Web Services Security.
- Decide which programming model, JAX-WS or JAX-RPC, works best for securing your web services applications.
- Configure the security bindings, or migrate an application and associated bindings.
- Develop and assemble a JAX-WS application.
- Deploy the JAX-WS application.
- Configure and administer the Web Services Security runtime environment.
- Configure policy sets through metadata exchange (WS-MetadataExchange).