Home/ Questions/Q 7989947
In Process

The Archive Base Latest Questions

Editorial Team
  • 0
Asked: 2026-06-04T12:52:44+00:00

I’m using a (simple) basic authentication within my servlet which works well for the

  • 0

I’m using a (simple) basic authentication within my servlet which works well for the Jetty 7.6 server but with Tomcat 6.0.35 I’m getting an error while trying to send the unauthorized response to show the username/password form in browser:

java.lang.IllegalStateException
org.apache.catalina.connector.ResponseFacade.sendError(ResponseFacade.java:421)

The code in my servlet looks like this:

response.setHeader("WWW-Authenticate", "Basic realm=\"" + realm + "\"");
response.sendError(HttpServletResponse.SC_UNAUTHORIZED);

The error occurs on line two of the code sample.
I’m not using the <security-constraint> in the web.xml. It should be a very, very simple authentication.

Any idea why Tomcat is not working but Jetty does?

Share

Leave an answer

You must login to add an answer.

Need An Account,

1 Answer

  1. Editorial Team

    Ensure:

    1. You do not have any filters that are producing output before your servlet runs
    2. You are only calling response.setStatus/response.sendError one time during the request
    3. You aren’t flushing the response buffer

    Any of the above can commit the response before you were expecting it.

    • 0