why form based authentication does not specify realm
Joined: Sep 02, 2003
BASIC authentication allows one to specify realm, but Form-Based authentication doesnot. I wonder why?
Also, how does BASIC authentication use the realm that is specified in DD?
Joined: Mar 22, 2005
Not following at all. Both basic and form authentication are specified in the web.xml file, which has no concept of realms. I'm only familiar with Tomcat, where you specify realms in the server.xml file, which is independent of any actual method of authentication you might want to use. Can you clarify where you see the difference between basic auth and form auth?