[ https://issues.apache.org/jira/browse/CXF-5165?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Freeman Fang resolved CXF-5165. ------------------------------- Resolution: Fixed Fix Version/s: 2.7.7 2.6.10 3.0.0 > add a JAAS authenticator for ServiceListPage > -------------------------------------------- > > Key: CXF-5165 > URL: https://issues.apache.org/jira/browse/CXF-5165 > Project: CXF > Issue Type: Improvement > Reporter: Freeman Fang > Assignee: Freeman Fang > Fix For: 3.0.0, 2.6.10, 2.7.7 > > > currently we already have an org.apache.cxf.servlet.hide-service-list-page > flag to indicate hide service list page or not, but sometimes users wanna a > username/password to protect this page so that request with correct > credential can view this page. Introduce a ServiceListJAASAuthenticator class > which can delegate the authentication to container level realm can make this > simple, if http header has correct credential, then return the servicelist > page, otherwise return 401 HTTP code. > Should introduce another two flags, one specify the realm name, the other one > indicate if need auth or not(default value is false to keep the behavior as > is) -- This message is automatically generated by JIRA. If you think it was sent incorrectly, please contact your JIRA administrators For more information on JIRA, see: http://www.atlassian.com/software/jira