Hi ,
Thanks for the replies, really appreciate that.
I am using BASIC because i am authenticating webservice calls. I
already have FORM for a sister application which provides web based access.
I want to log authentication failures.
Is the only option i have is overwrite
A little googling confirmed my earlier suspicion. The 401 response
contains the error page. This is why you can't redirect a 401 error
like a 404 or other error responses.
-David
Pid wrote:
If you're using a JDBC realm then you are using Tomcats authentication,
which operates at a higher l
If you're using a JDBC realm then you are using Tomcats authentication,
which operates at a higher level than Filters and Servlets, so you can't
insert anything into the chain there.
With Basic Auth, the browser does the submission of credentials, based
on the error codes that the server sends.
S
I believe in BASIC auth, the client already has the auth failed page
during authentication. Once authentication fails, that page is
displayed. Short of the images and other resources the error page
needs, there is not another request to the server hence no filter call.
--David
Dhiraj Ramakr
Hello,
I have configured a SimpleServletFilter to act as my authentication
filter, i want it to do certain things after the authentication has failed.
My application is being authenticated using a TOMCAT JDBC Realm. The
authentication scheme is BASIC.
I noticed that the filter is b
