TABLE OF CONTENTS We are now entering the next major part of the book: GT4 Security. This part of the book assumes that the reader knows his way around GT4 Java WS Core and all the fundamental concepts (how to compile a service, how to deploy it, etc.). This means some explanations won't be as detailed as before (to avoid being repetitious). One of the first things you'll notice is that, since the examples are starting to be quite long, complete code listings will be less frequent. Instead, relevant code sections will be described, usually describing what must be added to a typical service to enable a certain security feature. So, if you want to run the examples, don't forget to download the example files from the book's companion website at http://www.gt4book.com/.
Working with the security components of GT4 requires, of course, a basic knowledge of certain fundamental computer security concepts. If you are already familiar with concepts such as authentication, authorization, public key cryptography, and certificate authorities, then you can safely skip this chapter. If you've never dealt with secure communications, or feel your knowledge of these concepts might be a bit rusty, then you should definitely read this chapter. However, take into account that this chapter is meant as an
