I read somewhere that the following syntax is allowed in the [urls] section in shiro.ini:
/**:get = authcBasic What I want is to requrie basic authentication for all http GET requests. Specifically I do not want to require authentication for http OPTIONS method. I'm currently experimenting with getting CORS to work with the combination of Shiro (1.2.1), Jersey and Weblogic. If I use the above syntax I get the following exception on startup: "java.lang.IllegalArgumentException: There is no filter with name 'get = authcBasic' to apply to chain [/**] in the pool of available Filters. Ensure a filter with that name/path has first been registered with the addFilter method(s)." I think this indicates that my syntax is not supported. Is there any other way to specify a combination of an URL and an HTTP method? /Bengt
