Nic Ferrier wrote:
> >>> "Craig R. McClanahan" <[EMAIL PROTECTED]> 6/6/99 6:13:18
> AM >>>
> >A different approach to the whole situation is to not rely on web
> server basic authentication at all, and just do >it yourself with
> servlets. An example of this technique is at the Java
> >Developer's Connection web site (http://developer.javasoft.com).
>
> I'm not sure what craig means here, I think you probably are already
> using a servlet based authentication system.
>
> If he can clarify or point us to the article on Java dev con then I
> would be grateful.
>
There are articles in the "Technical Articles" section that describe how Java
Developer's Connection does its session management. It does not use HTTP
basic authentication, so the issue of sending an "UNAUTHORIZED" response never
comes up.
Note that the JDC implementation predated the availability of HttpSession in
the servlet API -- they had to do most of the grunt work themselves. This was
probably one of the motivations to get sessions into the servlet spec in the
first place, because it is a very common problem Start at:
http://developer.java.sun.com/developer/technicalArticles/InnerWorkings/BackstageSession/index.html
There are many other sites that do application-level login management (as
opposed to using web server Basic Authentication) that may or may not be
servlet based. Among the ones I frequent that do this:
Java Lobby (http://www.javalobby.org)
Slashdot (http://www.slashdot.org)
Oracle TechNiet (http://technet.oracle.com)
Yahoo Personal Mail (http://mail.yahoo.com)
You can use these kinds of sites for examples of how to deal with the user
interface issues involved. In a servlet environment, sessions make it pretty
easy to implement these kinds of things.
Craig McClanahan
___________________________________________________________________________
To unsubscribe, send email to [EMAIL PROTECTED] and include in the body
of the message "signoff SERVLET-INTEREST".
Archives: http://archives.java.sun.com/archives/servlet-interest.html
Resources: http://java.sun.com/products/servlet/external-resources.html
LISTSERV Help: http://www.lsoft.com/manuals/user/user.html
