Just on a side-note,
/users/** = authcBasic
leaves your user-password as plain-text and therefor totally vulnerable to
eavesdropping.
In production environments I suggest you change that line to
/users/** = ssl[insert your port number here], authcBasic
for instance my server 
/users/** = ssl[8443], authcBasic



--
View this message in context: 
http://shiro-user.582556.n2.nabble.com/Shiro-filter-with-Jaxrs-server-tp7580613p7580621.html
Sent from the Shiro User mailing list archive at Nabble.com.

Reply via email to