ApacheCon EU 2014

Security is the common requirement for almost all of the web service related products and solutions. Apache CXF framework provides a wide range of the security features for REST and SOAP services. It supports a number of security standards like OAuth, WS-Trust, WS-Federation. CXF users can benefit from new functionality in Authorization, Key Management and Security Token Service components.
This presentation will review CXF security features and illustrate them with the code. Andrei will show how the security requirements have been implemented in the real projects and discuss possible alternatives.
Which security options are available for the REST service? How to achieve federated authentication in CXF applications? How to implement authorization in web service? What is the benefit of the public key infrastructure and XKMS? - These questions will be discussed during the session.