[ 
https://issues.apache.org/jira/browse/CXF-5165?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
 ]

Freeman Fang resolved CXF-5165.
-------------------------------

       Resolution: Fixed
    Fix Version/s: 2.7.7
                   2.6.10
                   3.0.0
    
> add a JAAS authenticator for ServiceListPage
> --------------------------------------------
>
>                 Key: CXF-5165
>                 URL: https://issues.apache.org/jira/browse/CXF-5165
>             Project: CXF
>          Issue Type: Improvement
>            Reporter: Freeman Fang
>            Assignee: Freeman Fang
>             Fix For: 3.0.0, 2.6.10, 2.7.7
>
>
> currently we already have an org.apache.cxf.servlet.hide-service-list-page 
> flag to indicate hide service list page or not, but sometimes users wanna a 
> username/password to protect this page so that request with correct 
> credential can view this page. Introduce a ServiceListJAASAuthenticator class 
> which can delegate the authentication to container level realm can make this 
> simple, if http header has correct credential, then return the servicelist 
> page, otherwise return 401 HTTP code.
> Should introduce another two flags, one specify the realm name, the other one 
> indicate if need auth or not(default value is false to keep the behavior as 
> is)

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira

Reply via email to