added initial login templates and navigation rules

[addressbook-war.git] / web / WEB-INF / web.xml

diff --git a/web/WEB-INF/web.xml b/web/WEB-INF/web.xml
index c5e7c7381b8565920988ba7607cf0d319cb2eb37..0122fc6e65b7f98afffef2b210baaa8c3cf5e723 100644 (file)
--- a/web/WEB-INF/web.xml
+++ b/web/WEB-INF/web.xml
@@ -1,5 +1,7 @@
 <?xml version="1.0" encoding="UTF-8"?>
 <web-app version="3.1" xmlns="http://xmlns.jcp.org/xml/ns/javaee" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://xmlns.jcp.org/xml/ns/javaee http://xmlns.jcp.org/xml/ns/javaee/web-app_3_1.xsd">
+    <description>An online address book application to share private and business memebers between all members. It is also possible that the user's profile can be made visible to outside.</description>
+    <display-name>Addressbook Application v1.0</display-name>
     <context-param>
         <param-name>javax.faces.PROJECT_STAGE</param-name>
         <param-value>Development</param-value>
@@ -17,8 +19,35 @@
         <session-timeout>
             30
         </session-timeout>
+        <cookie-config>
+            <http-only>true</http-only>
+        </cookie-config>
     </session-config>
     <welcome-file-list>
         <welcome-file>faces/index.xhtml</welcome-file>
     </welcome-file-list>
+    <security-constraint>
+        <display-name>AdminConstraint</display-name>
+        <web-resource-collection>
+            <web-resource-name>admin</web-resource-name>
+            <description>Administrative area</description>
+            <url-pattern>/faces/admin/*</url-pattern>
+        </web-resource-collection>
+        <auth-constraint>
+            <description>Admin authentication</description>
+            <role-name>admin</role-name>
+        </auth-constraint>
+    </security-constraint>
+    <mime-mapping>
+        <extension>tpl</extension>
+        <mime-type>text/plain</mime-type>
+    </mime-mapping>
+    <login-config>
+        <auth-method>BASIC</auth-method>
+        <realm-name>file</realm-name>
+    </login-config>
+    <security-role>
+        <description>Administrativre rule</description>
+        <role-name>admin</role-name>
+    </security-role>
 </web-app>