Re: Optional authentication

2007-08-06 Thread Bruno Harbulot
Bill Barker wrote: You haven't missed anything. Tomcat simply doesn't try to authenticate a user if authentication isn't required. Simplest and most portable is to create a Filter that is configured as the first filter, and takes an auth-method init param to tell it what to use, and then

Re: Optional authentication

2007-08-02 Thread Bill Barker
"Bruno Harbulot" <[EMAIL PROTECTED]> wrote in message news:[EMAIL PROTECTED] > Hello, > > > I would like to be able to require authentication optionally and make my > servlets or JSPs behave differently depending on which Principals they > get. > For example, I'd like a GET to be able to return

Optional authentication

2007-08-02 Thread Bruno Harbulot
Hello, I would like to be able to require authentication optionally and make my servlets or JSPs behave differently depending on which Principals they get. For example, I'd like a GET to be able to return a 200 status and not 401, even if the user has not been authenticated. Presumably, this is