You can secure the deployed resources in the web server via basic authentication by making the appropriate security entries in the web.xml descriptor file and also in the container (vendor)-specific deployment descriptor file (glassfish-web.xml, in this example).
Let's say we want to use basic authentication for one of the JAX-RS sample web service applications that we built in the previous chapters.
The first step is to update the web descriptor web.xml file to look as follows. Note that web.xml is found in the WEB-INF folder of your web application; you should generate a new one if it is found to be missing:
<?xml version="1.0" encoding="UTF-8"?> <web-app ...> <security-constraint> <web-resource-collection> ...
