I'd like to be able to use the tools provided by the servlet spec, such as
getUserPrincipal, isUserInRole, etc. on HttpServletRequest and use the
HttpConstraint annotation, but without having the authentication and role
assignment being done by the server (because I'd prefer to get into as
little server specific setup as possible).

On Thu, Feb 7, 2013 at 9:00 PM, larry mccay <[email protected]> wrote:

> Depends on what you mean by application based authentication.
>
> You can always implement authentication in a servlet filter. You can use a
> security framework like spring security as a filter.
>
> You may want to provide more info of what you need to do.
> On Feb 7, 2013 7:19 PM, "Nils Kilden-Pedersen" <[email protected]> wrote:
>
>>  Is it possible to configure application based authentication without
>> having access to the server installation, i.e. only through the war file?
>>
>>
>> _______________________________________________
>> jetty-users mailing list
>> [email protected]
>> https://dev.eclipse.org/mailman/listinfo/jetty-users
>>
>>
> _______________________________________________
> jetty-users mailing list
> [email protected]
> https://dev.eclipse.org/mailman/listinfo/jetty-users
>
>
_______________________________________________
jetty-users mailing list
[email protected]
https://dev.eclipse.org/mailman/listinfo/jetty-users

Reply via email to