what is the difference between form-based and BASIC-based?

[liuhf]

hi all,
can you tell me
what is the difference
between
<login-config>
<auth-method>FORM</auth-method>
<realm-name>Gondor</realm-name>
<form-login-config>
<form-login-page>/login.jsp</form-login-page>
<form-error-page>/error.jsp</form-error-page>
</form-login-config>
</login-config>

and
<login-config>
<auth-method>BASIC</auth-method>
<realm-name>Gondor</realm-name>
<form-login-config>
<form-login-page>/login.jsp</form-login-page>
<form-error-page>/error.jsp</form-error-page>
</form-login-config>
</login-config>

can anyone tell me?

help please.
thanks.

liuhf.

[juha]

FORM login is bound to a server side session which can be controlled (invalidated) by a component on the server. The BASIC authentication scope is controlled by the browser client so there's little the server side application can do to control it.

[liuhf]

thank you for your explaination.

liuhf.