# Secure client api for a web service

**URL:** <https://www.ruby-forum.com/t/secure-client-api-for-a-web-service/158559>\
**Category:** Ruby\
**Created:** [January 24, 2009, 9:00pm UTC](https://www.ruby-forum.com/t/secure-client-api-for-a-web-service/158559 "2009-01-24T21:00:58Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![Carla](https://www.ruby-forum.com/letter_avatar_proxy/v4/letter/c/e9c0ed/32.png) [@Carla](https://www.ruby-forum.com/u/Carla)\
**Post date:** [January 24, 2009, 9:00pm UTC](https://www.ruby-forum.com/t/secure-client-api-for-a-web-service/158559/1 "2009-01-24T21:00:58Z")

</div>

Hello,

I have to make a client api using ruby, to a java web service.

Using wsdl2ruby, I generated the client stubs and now I am trying to  
use one of many popular methods of web service in a secure way i.e.  
digital signature etc.

Is there a CXF libraries (jar files) equivalent in Ruby that I can  
just import and start using their methods?

What other ways are there to start building a secure client api?

Thanks,  
Carla

---

<div class="post-metadata">

**Author:** ![Carla](https://www.ruby-forum.com/letter_avatar_proxy/v4/letter/c/e9c0ed/32.png) [@Carla](https://www.ruby-forum.com/u/Carla)\
**Post date:** [January 25, 2009, 1:50am UTC](https://www.ruby-forum.com/t/secure-client-api-for-a-web-service/158559/2 "2009-01-25T01:50:54Z")

</div>

Carla wrote:

> What other ways are there to start building a secure client api?

I’m not familiar with java and the technologies you mentioned, but I’d  
simply instruct my users (programmers) to access my api using https://.  
Their first call would be to the login page. Subsequent calls would need  
to send the session cookie.

---

<div class="post-metadata">

**Author:** ![Carla](https://www.ruby-forum.com/letter_avatar_proxy/v4/letter/c/e9c0ed/32.png) [@Carla](https://www.ruby-forum.com/u/Carla)\
**Post date:** [January 27, 2009, 7:22pm UTC](https://www.ruby-forum.com/t/secure-client-api-for-a-web-service/158559/3 "2009-01-27T19:22:15Z")

</div>

On Jan 24, 7:48 pm, Albert S. [removed\_email\_address@domain.invalid](mailto:removed_email_address@domain.invalid) wrote:

> Carla wrote:
> 
> > What other ways are there to start building a secure client api?
> 
> ## I’m not familiar with java and the technologies you mentioned, but I’d simply instruct my users (programmers) to access my api using https://. Their first call would be to the login page. Subsequent calls would need to send the session cookie.
> 
> Posted viahttp://www.ruby-forum.com/.

When I am trying to connect to the web service, I am getting  
(SOAP::FaultError) back that says Request does not contain required  
Security header. How do I add one?