users@glassfish.java.net

Re: bypassing form authentication through URL

From: Paul Sandoz <Paul.Sandoz_at_Sun.COM>
Date: Mon, 05 Jan 2009 13:42:11 +0100

Hi,

I do not know much about the auth mechanisms of EE and GF but i would
not recommend embedding a password in the URL. It would be better to
utilize HTTP authentication using the proper HTTP headers.

Paul.

On Dec 30, 2008, at 4:21 PM, Felipe Gaścho wrote:

> is it possible to type an URL that authenticate a user/password
> against the container ?
>
> I mean, I have my login form working fine.. with j_username +
> j_password .. and submit button
>
> may I authenticate with an URL like: http://user:paswd@locahost:
> 8080/.... ???
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: users-unsubscribe_at_glassfish.dev.java.net
> For additional commands, e-mail: users-help_at_glassfish.dev.java.net
>