Security is the common requirement for almost all of the
web service related products and solutions. Apache CXF framework provides a
wide range of the security features for REST and SOAP services. It supports a
number of security standards like OAuth, WS-Trust, WS-Federation. CXF users can
benefit from new functionality in SAML Web SSO, Authorization, Key Management
and Security Token Service components.
In my ApacheCon talk I reviewed CXF security features and
illustrated them with the code. The presentation shows how the security requirements
have been implemented in the real projects and represents possible alternatives.
Which security options are available for the REST service? How to achieve federated authentication in CXF applications? How to implement authorization in web service? What is the benefit of the public key infrastructure and XKMS? - These questions were discussed during the session.
