Matt RaibleMatt Raible is a Web Developer and Java Champion. Connect with him on LinkedIn.

The Angular Mini-Book The Angular Mini-Book is a guide to getting started with Angular. You'll learn how to develop a bare-bones application, test it, and deploy it. Then you'll move on to adding Bootstrap, Angular Material, continuous integration, and authentication.

Spring Boot is a popular framework for building REST APIs. You'll learn how to integrate Angular with Spring Boot and use security best practices like HTTPS and a content security policy.

For book updates, follow @angular_book on Twitter.

The JHipster Mini-Book The JHipster Mini-Book is a guide to getting started with hip technologies today: Angular, Bootstrap, and Spring Boot. All of these frameworks are wrapped up in an easy-to-use project called JHipster.

This book shows you how to build an app with JHipster, and guides you through the plethora of tools, techniques and options you can use. Furthermore, it explains the UI and API building blocks so you understand the underpinnings of your great application.

For book updates, follow @jhipster-book on Twitter.

10+ YEARS


Over 10 years ago, I wrote my first blog post. Since then, I've authored books, had kids, traveled the world, found Trish and blogged about it all.

RECENT ENTRIES


Tag Cloud


abbie appfuse birthday denver family grails gwt jack java javascript jhipster jsf linkedin maven roller skiing softwaresummit spring springmvc struts2 travel trish vacation webframeworks wicket
« Roller's Wiki -... | Main | RE: Who reads them... »
Saturday February 15, 2003

RE: Which servers support HTTP Digest Authentication

I did a bit of digging today to find out which J2EE servers support HTTP Digest Authentication. Here's what I found:

  • Tomcat: Yes. How do I know? My own experience, and this documentation. Why can't they just state this in Tomcat's documentation?
  • JBoss: Yes. How do I know? An earlier comment. Since JBoss can be configured with Tomcat and Jetty, this question is only applicable to those servers. I couldn't find any Jetty documentation indicating support, but I trust the users. Finding any information on JBoss is a real pain in the ass, I hate PDFs.
  • Resin: Yes. This documentation says so. This documentation and finding the answer was the easiest yet. Of course, the manual testing on Tomcat was pretty easy too.
  • Orion: No. How do I know? An e-mail I received from Nicholas Clarke, who tested it on Orion 1.5.2. Here's the message he received: Auto-deploying file:/usr/java/orion/wwwroot/antiaction/ (Assembly had been updated)... Error initializing site Alternative: Digest-Auth not supported Orion/1.5.2 initialized. I couldn't find anything on the Orion site indicating support for the different authentication types. Their documentation on web.xml seems to be a regurgitation of the DTD.
  • WebLogic: No. They've always had excellent documentation, making this a breeze to find.
  • WebSphere: No. How do I know? the 5.0 docs say so. BTW, I had to really dig to even find this documentation. Makes me glad I don't currently develop on WebSphere.
  • Sun ONE: No. Easy to find due to great documentation.
  • JRun: Who knows. I gave up searching for this documentation after 10 minutes. BTW, looking through JRun's technical whitepaper I found that "XDoclet has been tightly integrated into JRun 4." Very cool!

That seems like a waste of a good hour for a feature that no one ever uses. Oh well, at least you've been edumacated.

Posted in Java at Feb 15 2003, 12:03:40 PM MST 2 Comments
Comments:

I actually downloaded JRun4 and have it running on my machine. I wanted to see how it is as I too saw it has Struts and XDoclet integration. I am thinking of using either JRun or JBoss for when we eventually outgrow Apache/Tomcat in our work projects.

Posted by dsuspense on February 15, 2003 at 07:52 PM MST #

Just FYI, HTTP Digest authentication is broken under Tomcat, at least since V4. Little evidence that it ever worked. Here are some URLs: http://issues.apache.org/bugzilla/show_bug.cgi?id=9852 http://www.mail-archive.com/[email protected]/msg79674.html http://www.junlu.com/msg/116673.html You *can* use digests for passwords that are managed by Tomcat Realms. But that's digesting passwords in the tomcat-users.xml file, or in the database managed by a Tomcat realm. HTTP Digest is for encryption a password on the wire. John

Posted by John on May 10, 2005 at 12:24 PM MDT #

Post a Comment:
  • HTML Syntax: Allowed