Re: [jetty-users] Composite Authenticator implementations?

[John English <john.foreign@xxxxxxxxx>]

On 01/08/2025 08:34, Rickard Öberg via jetty-users wrote:
> Hi!
>
> I want to support multiple ways to authenticate users, which may be 
> clients(browsers) and other servers. For example: JWT token, Bearer 
> header, client certs, SSO cookie tokens. What is a good strategy for 
> doing this? Would it be possible to create a delegating Authenticator 
> with all of the above as options? Has anyone done anything like this before?

I use a custom-built Authenticator class with an abstract 
doAuthenticate() method, and derived classes (e.g. JNDIAuthenticator) 
which each use config parameters from web.xml to control the detailed 
behaviour.

--
John English

--
This email has been checked for viruses by AVG antivirus software.
www.avg.com