Tomcat Security Mechanism

Tomcat security mechanism BASIC Authentication <login-config> <auth-method> BASIC </auth-method> </login-config> DIGEST authentication uses MD5 encryption <login-config> <auth-method> DIGEST </auth-method> </login-config> FORM authentication for basic Custom forms, you can specify the login verification FORM <login-config> <auth-method> form </auth-method> <FORM-login-config> <! -Create a logon form --> <form-login-pages>/login.htm </form-login-pages> <! -Create an error form --> <form-error-pages>/error.html </form-error-pages> </form-login-config> </login-config> CLIENT-CERT A client certificate-based authentication method, relatively safe. However, the defect is that it cannot be used on clients without security certificates. <Login-config> <auth-method> CLIENT-CERT </auth-method> </login-config>