secure communication using jsonrp4j

[Christian Aendekerk]

Hi!

Currently im experimenting with jsonrpc4j an i i really like the way of using it. But my application needs some kind of authentification (i need my client to login before he can use some of the functions) and i really have some problems figuring out how to do that, securely, with jsonrpc4j... Am i missusing it or is there a practicale way? It is a requirement that it should be easy to write clients for the server in other languages(which was my reason for json). So could maybe someone point me in the right direction? I would very much appreciate it :)

Wishes,

Hellfiend

[Mikhail Mamaev]

The easiest way to pass in your every method "AccessKey" to validate access on server side. 

I recommend to use Spring AOP then to make it once for all methods. 

2013/3/22 Christian Aendekerk <hellf...@gmail.com>

--
You received this message because you are subscribed to the Google Groups "jsonrpc4j" group.
To unsubscribe from this group and stop receiving emails from it, send an email to jsonrpc4j+...@googlegroups.com.
To post to this group, send email to json...@googlegroups.com.
Visit this group at http://groups.google.com/group/jsonrpc4j?hl=en.
For more options, visit https://groups.google.com/groups/opt_out.
 
 

--
Best wishes
Mikhail Mamaev

[Brian C. Dilley]

This is exactly what I do.  Create an interceptor or a servlet filter and examine the HTTP headers for an AccessKey. ie:  X-MyCompany-AccessKey