On Sun, Feb 10, 2013 at 4:10 PM, larry mccay <[email protected]> wrote:

> I'm still a little confused about your usecase - what are planning to
> authenticate against if you don't want to use the server's configured
> realm/login service?
>

The application's own database of users. And the application's own concept
of roles. I've never understood why the JEE spec felt that was a server
responsibility (yet terribly under-spec'ed).

Anyway, seems like it's not possible, but thanks for taking the time.


>
> Again, you may be well served by spring security or apache shiro.
>
> Sorry that I can't be of more help.
>
> On Sun, Feb 10, 2013 at 3:15 PM, Nils Kilden-Pedersen <[email protected]>
> wrote:
> > I'd like to be able to use the tools provided by the servlet spec, such
> as
> > getUserPrincipal, isUserInRole, etc. on HttpServletRequest and use the
> > HttpConstraint annotation, but without having the authentication and role
> > assignment being done by the server (because I'd prefer to get into as
> > little server specific setup as possible).
> >
> >
> > On Thu, Feb 7, 2013 at 9:00 PM, larry mccay <[email protected]>
> wrote:
> >>
> >> Depends on what you mean by application based authentication.
> >>
> >> You can always implement authentication in a servlet filter. You can
> use a
> >> security framework like spring security as a filter.
> >>
> >> You may want to provide more info of what you need to do.
> >>
> >> On Feb 7, 2013 7:19 PM, "Nils Kilden-Pedersen" <[email protected]>
> wrote:
> >>>
> >>> Is it possible to configure application based authentication without
> >>> having access to the server installation, i.e. only through the war
> file?
> >>>
> >>>
> >>> _______________________________________________
> >>> jetty-users mailing list
> >>> [email protected]
> >>> https://dev.eclipse.org/mailman/listinfo/jetty-users
> >>>
> >>
> >> _______________________________________________
> >> jetty-users mailing list
> >> [email protected]
> >> https://dev.eclipse.org/mailman/listinfo/jetty-users
> >>
> >
> >
> > _______________________________________________
> > jetty-users mailing list
> > [email protected]
> > https://dev.eclipse.org/mailman/listinfo/jetty-users
> >
> _______________________________________________
> jetty-users mailing list
> [email protected]
> https://dev.eclipse.org/mailman/listinfo/jetty-users
>
_______________________________________________
jetty-users mailing list
[email protected]
https://dev.eclipse.org/mailman/listinfo/jetty-users

Reply via email to