Hola Costin: > > We can certainly add back the check and move back authorize() > to Realms, > but I would be happier if we find a way to avoid repeating it in all > realms. > Now looks really good , what i've done with realmSignNote was silly(tm), now it's does the right thing and much better.. IMHO :-) > To be honest, I don't know too much about Digest authentication - you > spent more time on this issue anyway. > You are confused with this code, this enables the ability of use Digested passwords in the JDBCRealm nothing to do with DIGEST auth, it's only to read digested passwords from the RDBMS.. :-) i'll attack soon with DIGEST auth but not now.. Saludos , Ignacio J. Ortega