Adding authorization to a third-party web service
问题 I have several third-party web services of which I only have their WSDL's. Currently they are only accessible in my internal network. I would like to expose those web services to the internet but, since they read/write sensitive information, I would need some sort of authentication mechanism in order to assure that only certain users are able to invoke them. The idea is to expose exactly the same interface (same operations with the same parameters) but intercepting each invocation to check