[jetty-users] Composite Authenticator implementations?

[Rickard Öberg <rickardoberg@xxxxxxxxx>]

Hi!

I want to support multiple ways to authenticate users, which may be clients(browsers) and other servers. For example: JWT token, Bearer header, client certs, SSO cookie tokens. What is a good strategy for doing this? Would it be possible to create a delegating Authenticator with all of the above as options? Has anyone done anything like this before?

thanks, Rickard