oracle.workspaces.ws
Interface S2SAuthenticationService

public interface S2SAuthenticationService

S2SAuthenticationService provides methods for a service to authenticate itself to another service on behalf of an end user.

The Service to Service (S2S) authentication framework provides a means for a trusted partner application to establish user sessions with a trusting provider application on behalf of its users, without having to supply any credentials for the users individually. The partner application instead supplies the credential with each user session login request that is used to validate/authenticate the partner as being trusted to the particular provider service.

Workspaces Web Services operate as the trusting provider service, with the partner service being potentially any application (registered/configured with Oracle Internet Directory) that is capable of establishing a client SOAP over HTTP Web Service connection with authentication headers.

The environment property "oracle.workspaces.ws.s2sEnabled" must be set to true.

The S2S header ORA_S2S_PROXY_USER must be set to the value of the supplied user's Oracle Internet Directory nickname attribute. Authentication HTTP headers that identify the partner service ought to be present.

Tip - A number of Web Services clients provide no published means to access the underlying HTTP transport to allow setting of the HTTP headers and so forth. These clients are thus incapable of utilizing the ServiceToServiceLoginService. As a workaround, Oracle Workspaces ships an S2S Servlet that can be accessed through a regular HTTP client library, such as HttpClient, * part of the Apache Jakarta Commons project. The session cookie returned through authentication to the S2S servlet can then be used by the Web Services client

Method Summary

void	login() Login method for the caller service.
void	logout() Closes the s2s session for this service, inturn to the user.

Method Detail

login

public void login()
           throws CwWSException

Login method for the caller service. If the caller service is in the trusted domain, a cwsession is established for the remove user. A cookie is set into the user's session and then on, all the subsequent calls will include this cookie, until it expires.

Throws:

CwWSException - - If the login fails.

logout

public void logout()
            throws CwWSException

Closes the s2s session for this service, inturn to the user.

Throws:

CwWSException - - On any error in closing the session