Re: SOAP Security: HTTP-Basic authentication

> I am not sure the SOAP API has any way to provide username and password 
> for basic authentication but for me here with Firefox 1.0 it works to 
> use XMLHttpRequest first to make a HTTP HEAD request sending the 
> credentials (the open method has the fourth and fifth argument for that) 
> and then to make the SOAP call e.g.

How about submitting username and password together with the URL?

var soapCall = new SOAPCall();
soapCall.transportURI = 'http://username:[email protected]/services/service.asmx';
soapCall.encode(...);

I know the security is not too good.
But then the URI need not be hardcoded, it can be created on the client. And next the request better use https to encrypt the whole stream....

Hiran