users@glassfish.java.net

Re: bypassing form authentication through URL

From: Felipe Gaúcho <fgaucho_at_gmail.com>
Date: Mon, 5 Jan 2009 13:45:04 +0100

Sure, it is for testing purposes.. after populating the DB with some
users/password, I want to check if my login page is working.. in my
ant script..

btw, it works.... :)

On Mon, Jan 5, 2009 at 1:42 PM, Paul Sandoz <Paul.Sandoz_at_sun.com> wrote:
> Hi,
>
> I do not know much about the auth mechanisms of EE and GF but i would not
> recommend embedding a password in the URL. It would be better to utilize
> HTTP authentication using the proper HTTP headers.
>
> Paul.
>
> On Dec 30, 2008, at 4:21 PM, Felipe Gaúcho wrote:
>
>> is it possible to type an URL that authenticate a user/password
>> against the container ?
>>
>> I mean, I have my login form working fine.. with j_username +
>> j_password .. and submit button
>>
>> may I authenticate with an URL like: http://user:paswd@locahost:8080/....
>> ???
>>
>> ---------------------------------------------------------------------
>> To unsubscribe, e-mail: users-unsubscribe_at_glassfish.dev.java.net
>> For additional commands, e-mail: users-help_at_glassfish.dev.java.net
>>
>
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: users-unsubscribe_at_glassfish.dev.java.net
> For additional commands, e-mail: users-help_at_glassfish.dev.java.net
>
>