8
I am working on project written by pure jsps(scriptlets) without using any frameworks.
jboss version: jboss-as-7.1.0.Final
I am now trying to add simple authentication on it. So when user try to browser the jsps, say, http://localhost/myContextPath/hello.jsp, it requires a login first.
web.xml
<security-constraint>
<web-resource-collection>
<web-resource-name>All Access</web-resource-name>
<url-pattern>/*</url-pattern>
<http-method>DELETE</http-method>
<http-method>PUT</http-method>
<http-method>HEAD</http-method>
<http-method>OPTIONS</http-method>
<http-method>TRACE</http-method>
<http-method>GET</http-method>
<http-method>POST</http-method>
</web-resource-collection>
<user-data-constraint>
<transport-guarantee>CONFIDENTIAL</transport-guarantee>
</user-data-constraint>
</security-constraint>
<login-config>
<auth-method>BASIC</auth-method>
</login-config>
jboss-web.xml
<jboss-web>
<security-domain>other</security-domain>
</jboss-web>
standalone.xml([jboss_home]\standalone\configuration folder)
<subsystem xmlns="urn:jboss:domain:security:1.1">
<security-domains>
<security-domain name="other" cache-type="default">
<authentication>
<login-module code="UsersRoles" flag="required">
<module-option name="usersProperties" value="users.properties"/>
<module-option name="rolesProperties" value="roles.properties"/>
</login-