I am building an Android application which communicates with the web server. I have implemented authentication and authorization in the web application itself. It looks bit cumbersome. So when I was browsing I came across Tomcat realm - container managed security. So I was wondering is it possible to use this? I have some questions:
- Can we configure Tomcat realm to extract the username and password from the HTTP request and authenticate it?
- I am using 2 way SSL handshake using client and server certificate. So will it cause any issue to configure Tomcat realm for authentication ?
I tried connecting from the browser, that will pop up the login window when tried to connect to secured URL. But the above case is not the web application, its a mobile application using the web server. Is this Tomcat realms authentication approach suitable for the above case?