Re: [jetty-users] application authentication

[Nils Kilden-Pedersen <nilskp@xxxxxxxxx>]

On Sun, Feb 10, 2013 at 4:10 PM, larry mccay <larry.mccay@xxxxxxxxx> wrote:

I'm still a little confused about your usecase - what are planning to
authenticate against if you don't want to use the server's configured
realm/login service?

The application's own database of users. And the application's own concept of roles. I've never understood why the JEE spec felt that was a server responsibility (yet terribly under-spec'ed).

Anyway, seems like it's not possible, but thanks for taking the time.
 

Again, you may be well served by spring security or apache shiro.

Sorry that I can't be of more help.

On Sun, Feb 10, 2013 at 3:15 PM, Nils Kilden-Pedersen <nilskp@xxxxxxxxx> wrote:
> I'd like to be able to use the tools provided by the servlet spec, such as
> getUserPrincipal, isUserInRole, etc. on HttpServletRequest and use the
> HttpConstraint annotation, but without having the authentication and role
> assignment being done by the server (because I'd prefer to get into as
> little server specific setup as possible).
>
>
> On Thu, Feb 7, 2013 at 9:00 PM, larry mccay <larry.mccay@xxxxxxxxx> wrote:
>>
>> Depends on what you mean by application based authentication.
>>
>> You can always implement authentication in a servlet filter. You can use a
>> security framework like spring security as a filter.
>>
>> You may want to provide more info of what you need to do.
>>
>> On Feb 7, 2013 7:19 PM, "Nils Kilden-Pedersen" <nilskp@xxxxxxxxx> wrote:
>>>
>>> Is it possible to configure application based authentication without
>>> having access to the server installation, i.e. only through the war file?
>>>
>>>
>>> _______________________________________________
>>> jetty-users mailing list
>>> jetty-users@xxxxxxxxxxx
>>> https://dev.eclipse.org/mailman/listinfo/jetty-users
>>>
>>
>> _______________________________________________
>> jetty-users mailing list
>> jetty-users@xxxxxxxxxxx
>> https://dev.eclipse.org/mailman/listinfo/jetty-users
>>
>
>
> _______________________________________________
> jetty-users mailing list
> jetty-users@xxxxxxxxxxx
> https://dev.eclipse.org/mailman/listinfo/jetty-users
>
_______________________________________________
jetty-users mailing list
jetty-users@xxxxxxxxxxx
https://dev.eclipse.org/mailman/listinfo/jetty-users