Check the Servlet 2.2 spec.  I'm quite sure that regexp matching in web.xml
is not specified in the spec, nor supported by any app server.  I'd be
interested to know if any other servers do implement this as a feature
though.

Scott Stirling
Macromedia

> -----Original Message-----
> From: Andreas Loew [mailto:[EMAIL PROTECTED]]
> Sent: Tuesday, April 10, 2001 1:23 PM
> To: JRun-Talk
> Subject: Regular expressions in authentication URL-pattern?
> 
> 
> Hello,
> 
> has anybody successfully used regular expressions for the URL 
> pattern in JRun 3.0 (SP 2a) authentication security constraints?
> 
> I'd like to exclude all URLs starting with /app/f* (frames 
> also needed by the login page) from authentication.
> The following is an excerpt from my web.xml file:
> 
>     <web-resource-collection>
>       <web-resource-name>testapp</web-resource-name>
>       <url-pattern>/app/[^f]*</url-pattern>
>       <http-method>GET</http-method>
>       <http-method>POST</http-method>
>       <description>testapp</description>
>     </web-resource-collection>
> 
> When setting the URL pattern to 
> 
>       <url-pattern>/app/*</url-pattern>
> 
> (without the regular expression), authentication works as expected.
> 
> Any other suggestions than moving all the files I want to 
> secure into an own subdirectory (after spending hours to 
> change all the links referencing them...)?
> 
> Thanks in advance
> 
> Andreas
> [EMAIL PROTECTED]

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Structure your ColdFusion code with Fusebox. Get the official book at 
http://www.fusionauthority.com/bkinfo.cfm
Archives: http://www.mail-archive.com/[email protected]/
Unsubscribe: http://www.houseoffusion.com/index.cfm?sidebar=lists

Reply via email to