TODO
====
- Implement queryResourceProperties
- Implement WS-Security - signing SOAP using x509 digitial
certificates is done. More testing needs to be done
for interoperability. The current API is crap -
what is required is a WSS::SigningPolicy object that allows
the user to specify what he wants to be signed/ or
verified.
Server Side
===========
sub serviceOperation {
my $envelope = pop @_;
$SigningPolicy = WSS::SigningPolicy->new();
$SigningPolicy->sign('Body' => namespace);
die "Not signed\n" unless
WSS::verify($envelope,$SigningPolicy);
$header = SOAP::Header->new()....
$data = SOAP::data->new()....
#sign the response using the rules defined by $SigningPolicy
return $header, $data, $SigningPolicy;
}
Client Side
===========
$SigningPolicy = WSS::SigningPolicy->new('Body' => namespace);
$ans = WSRF::Lite ->wsaddress($wsa)
->uri($namespace)
->sign($SigningPolicy)
->createCounterResource();
#check the signature using a WSS::SigningPolicy object
WSS::verify($ans, $SigningPolicy);
- Why does wget fail when a HTTP GET is done on a WS-Resource
endpoint - curl and GET work?
- When using Get(Multiple)ResourceProperty we ignore
namespaces because SOAP::Lite has thrown them away at
that point - SOAP::Lite 0.65 might rescue us.
- Problems if clients use xsi:types in SOAP messages.
- Need to handle "mustunderstand" in SOAP Headers properly.
- Implement WS-Notification
- Fix Weird Socket errors messages with SContainer
- Content rules for WS-ServiceGroups.