In tomcat, the user name and password are used for verification.

Edit the tomcat-users.xml file in conf

Add User Roles, user names, and passwords

<Role rolename = "user"/>
<User username = "username" password = "password" roles = "user"/>

Save and exit

Edit the web. xml file in the website directory WEB-INF

After <web-app>, add

<Security-constraint>
<Web-resource-collection>
<Web-resource-name> website directory </web-resource-name>
<Url-pattern>/* </url-pattern>
</Web-resource-collection>

<Auth-constraint>
<Role-name> user </role-name>
</Auth-constraint>
</Security-constraint>
<Security-role>
<Role-name> user </role-name>
</Security-role>
<Login-config>
<! -- <Auth-method> BASIC </auth-method> -->
<Auth-method> DIGEST </auth-method>
<Realm-name> website directory </realm-name>
</Login-config>

Save and exit

Restart the service for testing