Friday, August 20, 2010

HTTP DIGEST Authentication

HTTP digest authentication is performed by the browser upon request by the web server and based on a username, password, and realm. However, in this case your password is digested with the secure MD5 algorithm before it is sent by the browser.

Digest Authentication is just like HTTP BASIC Authentication. The only difference between basic and digest authentication is the specification of the authentication method and password encryption method.

Digest authentication is specified in an application's deployment descriptor as follows:

<login-config>
<auth-method>DIGEST</auth-method>
<realm-name>Digest Authentication Example</realm-name>
</login-config>

Hope this is useful! Enjoy!

No comments:

Post a Comment