Safari Books Online is a digital library providing on-demand subscription access to thousands of learning resources.
- Create BookmarkCreate Bookmark
- Create Note or TagCreate Note or Tag
- DownloadDownload
- PrintPrint
Chapter 8. SOAP Services Without HTTP > Authentication
8.2. Authentication
The non-HTTP classes share a trait that complicates the authentication layer of the WishListCustomer application. Each server class hands its requests to the SOAP::Server class directly, without processing headers like the HTTP classes do. Some classes represent cases where there is no native concept of headers (such as the TCP class); others, like the POP3 class, do have a concept of headers. However, none of these classes create HTTP::Request objects, so direct access to headers isn't inherently possible. As such, cookies can't be relied on to provide the authentication.
8.2.1. Server Authentication
Without cookies, the server classes must rely on the presence of authentication data in the header of the SOAP envelope. There are two ways to do this:
