User Authentication Over the Web

First, let's review the standard user authentication mechanisms for Web applications. There is HTTP Basic Authentication and SSL V3 Client Certificate Authentication.

The basic authentication protocol, also referred to as ”name and password authentication,” is defined as part of HTTP. It specifies that a server can request authentication (challenge) in response to any request from a client and requires the user agent (browser) to provide a name and password in the subsequent request header. The server's challenge is made relative to a server-specified realm (a text name) and is only valid for that realm. (A realm can be thought of as the set of URLs with the same root path or, in other words, the same host name ...

Get IBM WebSphere and Lotus Implementing Collaborative Solutions now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.