Client library authentication mechanisms

You can configure the binding of the transport mechanism you are using to provide the authentication credentials. The steps are dependent upon the transport you are using for Web services.

Binding configuration

For service binding using the HCL Commerce JCA Messaging subsystem, you can provide the authentication credentials as part of the parameters. See Configuration of transport services used for a message for more information.

Callback handler

The javax.security.auth.callback.CallbackHandler interface is part of the Java library and is used to specify a callback handler that will react to a particular set of callback objects. These callback objects represent authentication objects. The authentication objects are either empty objects that expect the callback handler to populate them, or populated objects that the callback handler can store information about. For information about this interface can be found by reading the API documentation of this interface.

This interface is part of the client library constructor. It is used by the presentation layer to interact with the transport layer to specify authentication information in the transport protocol. By using this interface a client can control the HCL Commerce identity token used in the SOAP requests to the remote component. The abstract client library will pass this information to the service binding so the transport can flow the authentication information with the remote request.

HCL Commerce component facades using the client library to communicate with another HCL Commerce component facade do not need to use this interface. The passing of the authentication information will be managed by the WebSphere Application Server.

The following table describes binding mechanisms and the available authentication mechanisms.

Binding mechanism Authentication mechanism Binding configuration
Generated Web service client proxy binding Yes Yes
Local EJB binding N/A N/A
Web services binding in a J2SE application Yes No
Service binding using the HCL Commerce JCA Messaging subsystem No Yes
Note: For local EJB binding the struts Web application will handle authentication information.