Can I use FORM and BASIC authentication together in my Java webapp?

Question

Is there any way to use FORM and BASIC authentication together in my webapplication? I have a RESTful interface in it and I'd like to allow scripts to use it with the simple BASIC auth method but I'd like to have the FORM based auth for web clients as well. I'd like the webapp respond with 302 Moved Temporarily redirecting to the login page for unauthorized requests, but if it finds that the client is sending the BASIC authentication's HTTP headers with username and password, then accept them just like in BASIC authentication.

I see that this is not possible with a single web.xml configuration but wondered if anyone else has some solution for this.

TedTrippin · Accepted Answer · 2012-09-17 15:03:31Z

1

Can you use a filter?

Inspect the request for your headers. If present do the login process and add session data etc. to the request. If it fails then either ignore it or redirect.

answered Sep 17, 2012 at 15:03

TedTrippin

3,6525 gold badges32 silver badges52 bronze badges

Sign up to request clarification or add additional context in comments.

1 Comment

jabal Over a year ago

Great idea, I'll investigate that!

jabal · Accepted Answer · 2012-09-26 12:18:59Z

0

If I configured container auth then my code was never invoked without authentication. So the answer is no. Jenkinks CI and similar software use FORM based authentication for a restricted set of web resources and make use of Spring Security where things are more flexible.

answered Sep 26, 2012 at 12:18

jabal

12.5k13 gold badges55 silver badges103 bronze badges

Collectives™ on Stack Overflow

Can I use FORM and BASIC authentication together in my Java webapp?

2 Answers 2

1 Comment

Comments

Your Answer

Hot Network Questions

Collectives™ on Stack Overflow

2 Answers 2

1 Comment

Comments

Your Answer

Sign up or log in

Post as a guest

Related