Methods to be used to implement the HTTP Basic Auth authorization
method. This is the standard username/password mechanism in use all
over the web.
Note: the username and password are sent over the net base64 encoded,
which is practically clear text. So this method is no more secure than
the communication channel being used.
Usage:
When a request comes in, before responding to it, call
getAuthentication() . It will return the username and
password that was sent along with the request. If no authorization was
sent, null is returned. The caller is then responsible for deciding if
the username and password are valid.
If the caller decides that the authorization is not sufficient,
a PageUnauthorizedException should be thrown.
If you are writing a LBS application, the recommended place to put
this processing is in your Application's requestPreprocessor()
function. That function is called for every request, before the
presentation objects are called.
See Also: com.lutris.appserver.server.httpPresentation.PageUnauthorizedException version: $Revision: 1.2 $ author: Andy John |