Question

(I’m using WebSphere 7, by the way)

I have a java web app with basic auth and a security constraint configured (show below).

When I visit my web app at http://localhost:9080/myapp/, the auth form does not appear.

However, when I visit the page directly http://localhost:9080/myapp/index.jsp the auth form does appear.

How can I make the form appear for the / welcome page?

<welcome-file-list>
  <welcome-file>index.jsp</welcome-file>
</welcome-file-list>

<security-constraint>
  <web-resource-collection>
    <url-pattern>/index.jsp</url-pattern>
    <http-method>GET</http-method>
  </web-resource-collection>
  <auth-constraint>
    <role-name>USERGROUP1</role-name>
  </auth-constraint>
  <user-data-contraint>
    <transport-guarantee>NONE</transport-guarantee>
  </user-data-contraint>
</security-constraint>

Answer 1

You create a dummy index.jsp that forwards to your “real” index page.