Re: servlet and HTTP authentication

2006-07-31 Thread Kristian Rink
Hey there; and, at first, thanks a lot for the hint. [EMAIL PROTECTED] schrieb: > WWW-Authenticate: Basic realm="My Document Management System" > > I'm not sure if tomcat will interpret the resulting "Authorization" header > in the next request, given that you asked him not to authenticate, b

Re: servlet and HTTP authentication

2006-07-28 Thread Christopher Schultz
Kristian, > However, following this approach I cannot use container-based > authentication as the DBMS user management repository is not easily > accessible via such a configuration but there are Java classes to > authenticate the user using an API which to be called from another Java > class, a s

Re: servlet and HTTP authentication

2006-07-27 Thread DJohnson
If you configure Tomcat to NOT require authentication for this particular servlet, then your servlet can examine the credentials, and if they are absent or insufficient, send a 401 - Not Authorized response, which causes the browser to prompt for id/pass. You can also manipulate the "realm" i