Sign Up to our social questions and Answers Engine to ask questions, answer people’s questions, and connect with other people.
Login to our social questions & Answers Engine to ask questions answer people’s questions & connect with other people.
Lost your password? Please enter your email address. You will receive a link and will create a new password via email.
Please briefly explain why you feel this question should be reported.
Please briefly explain why you feel this answer should be reported.
Please briefly explain why you feel this user should be reported.
What is the best way to do authenticate and authorize webapp request in Tomcat Servlet Container ?
I have two ideas,
1 – Use the Tomcat Realm.
2 – There is a web service where it provides capability to evaluate user request against XACML polices. That means if we send user name, resource name(Here the servlet) to that web service, it will evaluate the request against a XACML policy(where we can change or add new polices) and say permit or deny.
What is the best way ?
I suggest you to use tomcat realm or servlet filters