Speaking of the authentication dialog.  Does anyone know of a way to make
the JWS ACL routines ignore the password field?  What I mean is that if you
prompt a user with the authentication dialog and they do not enter in a
value for the password the internal ACL routines automatically deny access
without passing the event to the custom routines.

-John

-----Original Message-----
From: Christof Baumgaertner [mailto:[EMAIL PROTECTED]]
Sent: Wednesday, September 29, 1999 12:57 PM
To: [EMAIL PROTECTED]
Subject: Re: Please help with Authentication question?


You can. You can send back "Authenticate" and this will ask the browsers to
reauthenticate yourself.

Richard Yumul wrote:

> Sorry, there's no way to invalidate HTTP authentication short of
restarting your
> browser or changing the Authentication Realm header which is sent to the
> browser.
>
> -------------------------
> Richard M. Yumul
> mailto:[EMAIL PROTECTED]
> DTAI Incorporated
> http://www.dtai.com
> (619)542-1700 � fax:(619)542-8675
>
> > -----Original Message-----
> > From: A mailing list for discussion about Sun Microsystem's Java Servlet
> > API Technology. [mailto:[EMAIL PROTECTED]]On Behalf Of
> > Sushil
> > Sent: Wednesday, September 29, 1999 11:27 AM
> > To: [EMAIL PROTECTED]
> > Subject: Please help with Authentication question?
> >
> >
> > In jsp page even after calling session.invalidate() - Authorization
> > still has encoded user:password
> >
> > If you create WWW-Authenticate as in example 8.2 of Jason's Servlet
> > book, is there a way in JSP or servlet to invalidate this
authentication?
> >
> >
___________________________________________________________________________
> > To unsubscribe, send email to [EMAIL PROTECTED] and include in the
body
> > of the message "signoff SERVLET-INTEREST".
> >
> > Archives: http://archives.java.sun.com/archives/servlet-interest.html
> > Resources: http://java.sun.com/products/servlet/external-resources.html
> > LISTSERV Help: http://www.lsoft.com/manuals/user/user.html
> >
>
>
___________________________________________________________________________
> To unsubscribe, send email to [EMAIL PROTECTED] and include in the
body
> of the message "signoff SERVLET-INTEREST".
>
> Archives: http://archives.java.sun.com/archives/servlet-interest.html
> Resources: http://java.sun.com/products/servlet/external-resources.html
> LISTSERV Help: http://www.lsoft.com/manuals/user/user.html

--
!try; do()

___________________________________________________________________________
To unsubscribe, send email to [EMAIL PROTECTED] and include in the body
of the message "signoff SERVLET-INTEREST".

Archives: http://archives.java.sun.com/archives/servlet-interest.html
Resources: http://java.sun.com/products/servlet/external-resources.html
LISTSERV Help: http://www.lsoft.com/manuals/user/user.html

Reply via email to