Minimum required for basic user/password authentication on a POJO?

[kbeowulph]

Hello.

I've followed the authentication guide (http://community.jboss.org/wiki/JBossWS-Authentication) and have (mostly) successfully implemented basic security on a POJO web service.

The problem I'm having though is that my client requires two-sets of authentication setting; once for the HTTP basic authentication, and again in the request context (same user and password).  Is there a way I can set it so that the user only needs to authenticate at the request context level?

My files are attached (pasting them did not work very well).

Thanks.

[kbeowulph]

As usual, within an hour of posting a question on something I've been banging my head on for a while, I think I solved it.

As a quick note, do not modify web.xml (beyond adding the servlet); AFAIK everything in here is for HTTP authentication.

Files are attached.  I'll be spending a bit more time seeing if it can be trimmed down a little more.

[kbeowulph]

One more note, these files will not work without importing the following jars from $JBOSS_HOME/client

• jboss-common-core.jar
  
• jboss-javaee.jar
  
• jboss-xml-binding.jar
  
• jbossx-client.jar
  

Is it possible to get these added to the default JBOSS_WS libaries?  It seems like something we'd need if using it to build standalone clients.