WSE’s little known fact: custom SecurityContextToken issuers and policy
I’m sure everybody appreciated how WSE2 makes exceptionally easy to use WS-SecureConversation: you turn autoIssueSecurityContextToken on, you lay out two matching policy caches and voilà. Your endpoint has a double life: by day it answers WSDL-legitimate requests, by night it gives away SCTs to the worthy clients ๐What is less known is that you…
