Teach on Udemy

Turn what you know into an opportunity and reach millions around the world.

Learn More

Your cart is empty.

Keep shopping

Java Web Services Part 2 - SOAP and REST Security

Name: Java Web Services Part 2 - SOAP and REST Security
Rating: 4.7 (862 reviews)

Master advanced web services concepts and implement them in easy steps

Created byBharath Thippireddy

Last updated 6/2026

English

What you'll learn

Develop a simple SOAP service and client
Learn what WS Security is
Master the four security concepts - Authentication Confidentiality Integrity and Non Repudiation
Implement SOAP Web Services security using Apache CXF and WSS4J
Implement Username Token Profile authentication on client and the provider
Understand Encryption and Decryption
Learn how to use the java keytool
Generate and use keys/certificates
Implement Encryption and Decryption
Sign the SOAP messages and ensure message integrity
Enable Timestamps to prevent replay attacks
And much more in the future on this agile style and incremental course

Course content

15 sections • 109 lectures • 4h 22m total length

Instructor and course introduction2:34
Private Course Feedback Link0:14
How to make the best of this course1:53
Troubleshooting Maven Projects1:25
Download the completed projects0:55

Simple Usecase0:46
Create the Project2:32
Add Maven Dependencies3:13
<properties>

<cxf.version>3.1.9</cxf.version>

</properties>

<build>

<plugins>

<plugin>

<groupId>org.apache.maven.plugins</groupId>

<artifactId>maven-compiler-plugin</artifactId>

<version>3.2</version>

<configuration>

<source>1.8</source>

<target>1.8</target>

</configuration>

</plugin>

<plugin>

<artifactId>maven-war-plugin</artifactId>

<version>2.1</version>

<configuration>

<webXml>src/main/webapp/WEB-INF/web.xml</webXml>

</configuration>

</plugin>

</plugins>

<finalName>sumws</finalName>

</build>

<dependencies>

<dependency>

<groupId>org.apache.cxf</groupId>

<artifactId>cxf-rt-frontend-jaxws</artifactId>

<version>${cxf.version}</version>

</dependency>

<dependency>

<groupId>org.apache.cxf</groupId>

<artifactId>cxf-rt-transports-http</artifactId>

<version>${cxf.version}</version>

</dependency>

<dependency>

<dependency>

<groupId>org.springframework</groupId>

<artifactId>spring-core</artifactId>

<version>3.2.0.RELEASE</version>

</dependency>

<dependency>

<groupId>org.springframework</groupId>

<artifactId>spring-context</artifactId>

<version>3.2.0.RELEASE</version>

</dependency>

<dependency>

<groupId>org.springframework</groupId>

<artifactId>spring-web</artifactId>

<version>3.2.0.RELEASE</version>

</dependency>

</dependencies>
Create the WS Endpoint4:03
Mark with JAXB Annotations2:42
Mark with JAX-WS Annotations1:40
Configure the endpoint3:26
Configure the cxf servlet1:59
Deploy and Run2:27

Create the client Project2:01
Generate the Stubs2:53
<properties>

<cxf.version>3.1.9</cxf.version>

</properties>

<build>

<plugins>

<plugin>

<groupId>org.apache.maven.plugins</groupId>

<artifactId>maven-compiler-plugin</artifactId>

<version>3.2</version>

<configuration>

<source>1.8</source>

<target>1.8</target>

</configuration>

</plugin>

<plugin>

<groupId>org.apache.cxf</groupId>

<artifactId>cxf-codegen-plugin</artifactId>

<version>${cxf.version}</version>

<executions>

<execution>

<id>generate-sources</id>

<phase>generate-sources</phase>

<configuration>

<sourceRoot>${basedir}/src/generated</sourceRoot>

<wsdlOptions>

<wsdlOption>

<wsdl>${basedir}/src/main/resources/sumService.wsdl</wsdl>

</wsdlOption>

</wsdlOptions>

</configuration>

<goals>

<goal>wsdl2java</goal>

</goals>

</execution>

</executions>

</plugin>

</plugins>

<finalName>sumwsclient</finalName>

</build>

<dependencies>

<dependency>

<groupId>org.apache.cxf</groupId>

<artifactId>cxf-rt-frontend-jaxws</artifactId>

<version>${cxf.version}</version>

</dependency>

<dependency>

<groupId>org.apache.cxf</groupId>

<artifactId>cxf-rt-transports-http</artifactId>

<version>${cxf.version}</version>

</dependency>

<dependency>

<groupId>org.springframework</groupId>

<artifactId>spring-core</artifactId>

<version>3.2.0.RELEASE</version>

</dependency>

<dependency>

<groupId>org.apache.cxf</groupId>

<artifactId>cxf-rt-ws-security</artifactId>

<version>${cxf.version}</version>

</dependency>

<dependency>

<groupId>commons-httpclient</groupId>

<artifactId>commons-httpclient</artifactId>

<version>3.1</version>

</dependency>

<dependency>

<groupId>commons-codec</groupId>

<artifactId>commons-codec</artifactId>

<version>1.9</version>

</dependency>

<dependency>

<groupId>org.springframework</groupId>

<artifactId>spring-context</artifactId>

<version>3.2.0.RELEASE</version>

</dependency>

<dependency>

<groupId>junit</groupId>

<artifactId>junit</artifactId>

<version>4.4</version>

</dependency>

</dependencies>
Create the client and test4:41
Enable CXF logging2:02

What is Username Token Profile?1:00
Steps to Configure Username Token Profile0:30
Update the maven dependencies1:46
<dependency>

<groupId>org.apache.cxf</groupId>

<artifactId>cxf-rt-ws-security</artifactId>

<version>${cxf.version}</version>

</dependency>

<dependency>

<groupId>commons-httpclient</groupId>

<artifactId>commons-httpclient</artifactId>

<version>3.1</version>

</dependency>

<dependency>

<groupId>commons-codec</groupId>

<artifactId>commons-codec</artifactId>

<version>1.9</version>

</dependency>
Configure User Name Token Profile3:47
Create and configure the PasswordCallbackHandler5:09
Run the application on the server1:24
Update Client Maven Dependencies1:02
Retrieve the CXF Client Proxy1:16
Create the WSSJ Interceptors Programmatically1:39
Configure the properties2:19
Run the test2:20
WS Security - Authentication

Steps to enable Encryption0:43
Create the Key Pairs6:20
keytool -genkey -keyalg RSA -sigalg SHA1withRSA -validity 600 -alias myservicekey -keypass skpass -storepass sspass -keystore serviceKeystore.jks -dname "cn=Bharath"

keytool -genkey -keyalg RSA -sigalg SHA1withRSA -validity 600 -alias myclientkey -keypass ckpass -storepass cspass -keystore clientKeystore.jks -dname "cn=Bharath"
Export the public keys3:03
keytool -export -rfc -keystore clientKeystore.jks -storepass cspass -alias myclientkey -file MyClient.cer

keytool -export -rfc -keystore serviceKeystore.jks -storepass sspass -alias myservicekey -file MyService.cer
Import the certificates2:07
keytool -import -trustcacerts -keystore serviceKeystore.jks -storepass sspass -alias myclientkey -file MyClient.cer -noprompt

keytool -import -trustcacerts -keystore clientKeystore.jks -storepass cspass -alias myservicekey -file MyService.cer -noprompt
The trustcacerts Flag1:15
Copy the keystores to projects1:05
Configure Encryption Action and Properties1:49
Create the property file2:48
Update the PasswordCallbackHandler0:44
Add decryption action1:27
Create the property file1:08
Update the PasswordCallbackHandler0:25
Test encryption and decryption3:16
What just happened?1:32
Enable encryption on the Server2:37
Enable Decryption on the client4:22

Requirements

Complete my Java Web Services Course on UDemy
Or Should Have Apache CXF and SOAP and REST Web Services Knowledge

Description

The ONLY course that covers the SOAP and REST web services Security Comprehensively!

---

Sample of the reviews:

Straight to the point. I was looking for an alternative to axis2/rampart for SOAP ws-security, and I'm glad I found this course. As a nice bonus (for me at least) this course also covers REST security. 5/5. - Ionescu Alexandru

I have done or finished both the courses on Web Services By Bharath and it is so knowledgeable and give me a real time experience,I can even use the same examples in my company.Now I am planning to do the course on Create REST APIs using Spring Data REST by Bharath. Friends go for the course and don't waste your time on thinking too much. - Vivek Kumar Gupta

Awesome, completed up to Encryption & Decryption, clear explanation. So far so good. - Brady Adams

---

All source code is available for download

Responsive Instructor - All questions answered within 24 hours

Professional video and audio recordings (check the free previews)

----

This course is a continuation of my "Java Web Services" course which is the most popular course on that topic on UDemy as well as on the internet.

Are you interested in learning and implementing advanced Web Services concepts such as Security ? Then this course is for you.This is a incremental course.I will adding several new topics such as OAuth,Async Communication and more relevant topics that are not covered in the Java Web Service course.

Do you want to learn the four key security areas and address them in your SOAP Web Services?

This course will simplify things with concepts and step by step implementations . By the end of it you will:

1. Understand the four key security areas

2. Use the WS-Security standard to secure your services

3. Implement Authentication

4. Understand what Encryption is and why it is required

5. Learn how to use the java keytool to generate security key pairs

6. Implement Encryption and Decryption both on the web service client and web service provider

7. Learn what , why and how to sign soap messages

8. Prevent replay attacks by enabling Timestamps

9. And many more advanced SOAP and REST web services topics in the near future

Who this course is for:

Students who have completed my Java Web Services Course on UDemy
or Students with strong SOAP and REST web services knowledge
Student who want to master the security concepts and implementation
Students who want to learn and implement advanced web services concepts

Java Web Services Part 2 - SOAP and REST Security

What you'll learn

Explore related topics

Course content

Start Here5 lectures • 7min

SOAP Web Service Creation9 lectures • 23min

SOAP Web Service Client Creation4 lectures • 12min

SOAP WS Standards Concepts3 lectures • 9min

WS Security - Authentication11 lectures • 22min

Encryption and Decryption Concepts4 lectures • 13min

WS Security - Confidentiality(Encryption/Decryption)16 lectures • 35min

WS Security - Integrity (Signatures)6 lectures • 10min

WS Security - Non Repudiation (Timestamp)4 lectures • 7min

Securing parts of the message4 lectures • 14min

Requirements

Description

Who this course is for: