skip to main content
Pacific Application Server for OpenEdge: Administration Guide
Web application security configurations : Enabling Spring Security for APSV and SOAP Web applications
 

Enabling Spring Security for APSV and SOAP Web applications

After you apply and configure a Spring Security model for Web applications, Spring Security is only enabled for REST Web applications. Additional configuration is necessary if you want to enable Spring Security for APSV and SOAP Web applications.
By default, security is disabled for both APSV and SOAP transports. The following snippet from oeablSecurity-xxxx.xml shows that security is disabled as a result of the import of apsv-basic.xml and soap-none.xml:

<!-- To disable security for APSV, import apsv-none.xml (and comment out import of apsv-basic.xml)-->
<!-- To enable security for APSV, import apsv-basic.xml (and comment out import of apsv-none.xml) -->
<b:import resource="apsv-none.xml"/>
<!--<b:import resource="apsv-basic.xml"/> -->

<!-- To disable security for SOAP, import apsv-none.xml (and comment out import of soap-basic.xml)-->
<!-- To enable security for SOAP, import apsv-basic.xml (and comment out import of soap-none.xml) -->
<b:import resource="soap-none.xml"/>
<!--<b:import resource="soap-basic-local.xml"/> -->
The first step to enable security for APSV and/or SOAP Web applications is to comment out the defaults and import apsv-basic.xml and/or soap-basic-local.xml. In the following example, Spring Security is enabled for both APSV and SOAP:

<!-- To disable security for APSV, import apsv-none.xml (and comment out import of apsv-basic.xml)-->
<!-- To enable security for APSV, import apsv-basic.xml (and comment out import of apsv-none.xml) -->
<!-- <b:import resource="apsv-none.xml"/> -->
<b:import resource="apsv-basic.xml"/>

<!-- To disable security for SOAP, import apsv-none.xml (and comment out import of soap-basic.xml)-->
<!-- To enable security for SOAP, import apsv-basic.xml (and comment out import of soap-none.xml) -->
<!-- <b:import resource="soap-none.xml"/> -->
<b:import resource="soap-basic-local.xml"/>
After you enable security, you need to update the apsv-basic.xml and/or soap-basic-local.xml template files.
In this section: 
* Updating apsv-basic.xml
* Updating soap-basic-local.xml