Take the 2-minute tour ×
Webmasters Stack Exchange is a question and answer site for pro webmasters. It's 100% free, no registration required.

I am building an Android application which communicates with the web server. I have implemented authentication and authorization in the web application itself. It looks bit cumbersome. So when I was browsing I came across Tomcat realm - container managed security. So I was wondering is it possible to use this? I have some questions:

  1. Can we configure Tomcat realm to extract the username and password from the HTTP request and authenticate it?
  2. I am using 2 way SSL handshake using client and server certificate. So will it cause any issue to configure Tomcat realm for authentication ?

I tried connecting from the browser, that will pop up the login window when tried to connect to secured URL. But the above case is not the web application, its a mobile application using the web server. Is this Tomcat realms authentication approach suitable for the above case?

share|improve this question

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Browse other questions tagged or ask your own question.