1

I'm exposing a service as a SOAP Webservice using Apache CXF 2.4.1. I'm using CXF's WS-Security implementation to implement a custom authentication and authorization.

Everything is being wired with Spring.

My CallbackHandler is being properly called upon a normal SOAP request. But when a request comes from a simple GET request, like calling the service from a browser with the url below, my handler is not called.

http://localhost:8080/ws/customerService/findById?id=1

Checking CXF's WS-Security code it is ignoring GET requests completely (code below). Why?

public void handleMessage(SoapMessage msg) throws Fault {
    if (msg.containsKey(SECURITY_PROCESSED) || isGET(msg)) {
        return;
    }
   ...
 }

0

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.