Re: [Jetty-support] Embedded servlet w/ basic auth

[Jan B. <ja...@we...>]

Sparkletron,

try this instead

regards
Jan




import java.io.IOException;

import javax.servlet.ServletException;
import javax.servlet.http.HttpServlet;
import javax.servlet.http.HttpServletRequest;
import javax.servlet.http.HttpServletResponse;

import org.mortbay.jetty.Server;
import org.mortbay.jetty.Handler;
import org.mortbay.jetty.security.BasicAuthenticator;
import org.mortbay.jetty.security.Constraint;
import org.mortbay.jetty.security.ConstraintMapping;
import org.mortbay.jetty.security.HashUserRealm;
import org.mortbay.jetty.security.SecurityHandler;
import org.mortbay.jetty.security.UserRealm;
import org.mortbay.jetty.servlet.ServletHandler;

public final class blah {
        
        public static void main(String[] args) throws Exception {
                Server server = new Server(8080);
                
                ServletHandler servletHandler = new ServletHandler();
                servletHandler.addServletWithMapping(blah.TestServlet.class, "/");
                
                Constraint constraint = new Constraint();
                constraint.setRoles(new String[] { "admin" });
                constraint.setAuthenticate(true);
                
                ConstraintMapping constraintMapping = new ConstraintMapping();
                constraintMapping.setConstraint(constraint);
                constraintMapping.setPathSpec("/*");
                
                HashUserRealm hashUserRealm = new HashUserRealm();
                hashUserRealm.setName("Test");
                hashUserRealm.put("test", "test");
                hashUserRealm.addUserToRole("test", "admin");
                
                SecurityHandler securityHandler = new SecurityHandler();
                securityHandler.setUserRealm(hashUserRealm);
                securityHandler.setAuthenticator(new BasicAuthenticator());
                securityHandler.setConstraintMappings(new ConstraintMapping[] { constraintMapping });
                
                server.setUserRealms(new UserRealm[] { hashUserRealm });

                server.setHandlers(new Handler[] {securityHandler, servletHandler});
                
                server.start();
                server.join();
        }
        
        public static class TestServlet extends HttpServlet {
                
                public void doGet(HttpServletRequest httpServletRequest, HttpServletResponse httpServletResponse) throws ServletException, IOException {
                        System.out.println("Did you successfully authenticate prior to seeing me?");
                }
 
        }
}



Sparkletron wrote:
> import java.io.IOException;
> 
> import javax.servlet.ServletException;
> import javax.servlet.http.HttpServlet;
> import javax.servlet.http.HttpServletRequest;
> import javax.servlet.http.HttpServletResponse;
> 
> import org.mortbay.jetty.Server;
> import org.mortbay.jetty.security.Constraint;
> import org.mortbay.jetty.security.ConstraintMapping;
> import org.mortbay.jetty.security.HashUserRealm;
> import org.mortbay.jetty.security.SecurityHandler;
> import org.mortbay.jetty.security.UserRealm;
> import org.mortbay.jetty.servlet.ServletHandler;
> 
> public final class Test {
> 	
> 	public static void main(String[] args) throws Exception {
> 		Server server = new Server(8080);
> 		
> 		ServletHandler servletHandler = new ServletHandler();
> 		servletHandler.addServletWithMapping(Test.TestServlet.class, "/");
> 		
> 		Constraint constraint = new Constraint();
> 		constraint.setName(Constraint.__BASIC_AUTH);
> 		constraint.setRoles(new String[] { "admin" });
> 		constraint.setAuthenticate(true);
> 		constraint.isForbidden();
> 		
> 		ConstraintMapping constraintMapping = new ConstraintMapping();
> 		constraintMapping.setConstraint(constraint);
> 		constraintMapping.setPathSpec("/*");
> 		
> 		HashUserRealm hashUserRealm = new HashUserRealm();
> 		hashUserRealm.setName("Test");
> 		hashUserRealm.put("test", "test");
> 		hashUserRealm.addUserToRole("test", "admin");
> 		
> 		SecurityHandler securityHandler = new SecurityHandler();
> 		securityHandler.setUserRealm(hashUserRealm);
> 		securityHandler.setConstraintMappings(new ConstraintMapping[] { constraintMapping });
> 		
> 		server.setUserRealms(new UserRealm[] { hashUserRealm });
> 		
> 		// You add a SecurityHandler...
> 		server.addHandler(securityHandler);
> 		
> 		// Yet you set a ServletHandler? That's confusing.
> 		server.setHandler(servletHandler);
> 		
> 		server.start();
> 	}
> 	
> 	public static class TestServlet extends HttpServlet {
> 		
> 		public void doGet(HttpServletRequest httpServletRequest, HttpServletResponse httpServletResponse) throws ServletException, IOException {
> 			System.out.println("Did you successfully authenticate prior to seeing me?");
> 		}
> 	}
> }
> 
> 
> ------------------------------------------------------------------------
> View this message in context: Re: Embedded servlet w/ basic auth
> <http://www.nabble.com/Embedded-servlet-w--basic-auth-tf3177608.html#a12565037>
> Sent from the Jetty Support mailing list archive
> <http://www.nabble.com/Jetty-Support-f61.html> at Nabble.com.
> 
> 
> ------------------------------------------------------------------------
> 
> -------------------------------------------------------------------------
> This SF.net email is sponsored by: Microsoft
> Defy all challenges. Microsoft(R) Visual Studio 2005.
> http://clk.atdmt.com/MRT/go/vse0120000070mrt/direct/01/
> 
> 
> ------------------------------------------------------------------------
> 
> _______________________________________________
> Jetty-support mailing list
> Jet...@li...
> https://lists.sourceforge.net/lists/listinfo/jetty-support


-- 
Jan Bartel, Webtide LLC | ja...@we... | http://www.webtide.com