Re: [jetty-users] Composite Authenticator implementations?

[Simone Bordet <sbordet@xxxxxxxxxxx>]

Rickard,

On Fri, Aug 1, 2025 at 7:34 AM Rickard Öberg via jetty-users
<jetty-users@xxxxxxxxxxx> wrote:
>
> Hi!
>
> I want to support multiple ways to authenticate users, which may be clients(browsers) and other servers. For example: JWT token, Bearer header, client certs, SSO cookie tokens. What is a good strategy for doing this? Would it be possible to create a delegating Authenticator with all of the above as options? Has anyone done anything like this before?
>

Jetty 12.1.x has MultiAuthenticator.
I'm not sure whether it matches your use case, but perhaps you can look into it?

Otherwise, please open an issue (or a GitHub Discussion here:
https://github.com/jetty/jetty.project/discussions).

Thanks!
-- 
Simone Bordet
----
http://cometd.org
http://webtide.com
Developer advice, training, services and support
from the Jetty & CometD experts.