07 - Inbound Web Services
07 - Inbound Web Services
§ A stateless session:
§ Is opened with initial request
§ Remains open for subsequent requests
§ Allows relogin automatically if session is closed
§ Occurs transparently to user
§ Benefit:
§ Allows a client to submit multiple requests without the
overhead of verifying credentials for each request
§ Initial request must contain user name and password
§ Anonymous login not supported for stateless sessions
§ Set SessionType element in SOAP header to
Stateless
Authentication Process: Stateless Session
§ A stateful session:
§ Is opened with initial request
§ Remains open for subsequent request
§ Does not support automatic relogin if session is closed
§ Supports Web services that maintain some form of
user state
§ Example: a shopping cart Web service that stores items
until the end of the session
§ Initial request must contain user name and password
§ Anonymous login not supported for stateful sessions
§ Set SessionType element in SOAP header to Stateful
Web Services (WS) Security Support