Java basic authorization with URLConnection

Question

I'm opening a connection to WebService with an URLConnection class. I also set request property for basic authorization like this:

c.setRequestProperty("Authorization", "Basic " + usernameAndPasswordEncoded);

Where c is an object of type URLConnection. So this is client side of WebService call. Now on server side I need to get username from session:

User user = (User) request.getSession().getAttribute("user");

But this won't get an username. Also if I look through debug mode, I see an anonymous userName in HttpSession object. What to do to solve this problem, so that username is sent through client to WebService server for authorization?

Thanks everyone!

Have you 'secured' this url in the web.xml?

Ryan Fernandes
– Ryan Fernandes

2010-06-01 08:05:49 +00:00
Commented Jun 1, 2010 at 8:05 — Ryan Fernandes
– Ryan Fernandes, Commented Jun 1, 2010 at 8:05
No, I didn't. Thank you, I didn't really know I have to.

zigomir
– zigomir

2010-06-01 08:27:36 +00:00
Commented Jun 1, 2010 at 8:27 — zigomir
– zigomir, Commented Jun 1, 2010 at 8:27

ZZ Coder · Accepted Answer · 2010-06-01 11:23:46Z

3

On the server end, you need to specify the login method in web.xml. For example,

<login-config>
  <auth-method>BASIC</auth-method>
  <realm-name>My App</realm-name>
</login-config>

Once you do that, the username should be available using request.getRemoteUser().

answered Jun 1, 2010 at 11:23

ZZ Coder

75.7k30 gold badges139 silver badges169 bronze badges

Sign up to request clarification or add additional context in comments.

1 Comment

zigomir Over a year ago

Tnx. I had that, but I didn't have <security-constraint> defined in web.xml file.

Michael Borgwardt · Accepted Answer · 2010-06-01 07:36:08Z

0

The servlet specification provides explicit abstractions for that - what you need is request.getRemoteUser()., or perhaps request.getUserPrincipal()

answered Jun 1, 2010 at 7:36

Michael Borgwardt

347k81 gold badges491 silver badges726 bronze badges

1 Comment

Michael Borgwardt Over a year ago

@zigomir: then the authorization process isn't working out. See if you can find any hints in the server log.

Collectives™ on Stack Overflow

Java basic authorization with URLConnection

2 Answers 2

1 Comment

1 Comment

Your Answer

Hot Network Questions

Collectives™ on Stack Overflow

2 Answers 2

1 Comment

1 Comment

Your Answer

Sign up or log in

Post as a guest

Related