appserver/tests/appserv-tests/devtests/connector/v3/securitymapweb/web/WEB-INF/web.xml

<?xml version="1.0" encoding="UTF-8"?>
<!--

    Copyright (c) 2004, 2018 Oracle and/or its affiliates. All rights reserved.

    This program and the accompanying materials are made available under the
    terms of the Eclipse Public License v. 2.0, which is available at
    http://www.eclipse.org/legal/epl-2.0.

    This Source Code may also be made available under the following Secondary
    Licenses when the conditions for such availability set forth in the
    Eclipse Public License v. 2.0 are satisfied: GNU General Public License,
    version 2 with the GNU Classpath Exception, which is available at
    https://www.gnu.org/software/classpath/license.html.

    SPDX-License-Identifier: EPL-2.0 OR GPL-2.0 WITH Classpath-exception-2.0

-->

<web-app version="2.4" xmlns="http://java.sun.com/xml/ns/j2ee" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://java.sun.com/xml/ns/j2ee http://java.sun.com/xml/ns/j2ee/web-app_2_4.xsd">
  <display-name>Welcome to BASIC Security Zone</display-name>
  <servlet>
    <display-name>basic</display-name>
    <servlet-name>basic</servlet-name>
    <jsp-file>/index.jsp</jsp-file>
  </servlet>
  <session-config>
    <session-timeout>30</session-timeout>
  </session-config>
  <resource-ref>
    <res-ref-name>jdbc/DS</res-ref-name>
    <res-type>javax.sql.DataSource</res-type>
    <res-auth>Container</res-auth>
    <res-sharing-scope>Shareable</res-sharing-scope>
  </resource-ref>
  <security-constraint>
    <web-resource-collection>
      <web-resource-name>basic secuity test</web-resource-name>
      <url-pattern>/*</url-pattern>
    </web-resource-collection>
    <auth-constraint>
      <role-name>employee</role-name>
      <role-name>contractor</role-name>
      <role-name>management</role-name>
    </auth-constraint>
  </security-constraint>
  <login-config>
    <auth-method>BASIC</auth-method>
    <!--<realm-name>basic-file</realm-name>-->
<!--    <realm-name>jdbc</realm-name> -->
  </login-config>
  <!-- replace last section with this section to run CLIENT-CERT sample.
  <login-config>
    <auth-method>CLIENT-CERT</auth-method>
    <realm-name>basic-file</realm-name>
  </login-config>
  -->
  <security-role>
    <role-name>employee</role-name>
  </security-role>
  <security-role>
    <role-name>contractor</role-name>
  </security-role>
  <security-role>
    <role-name>management</role-name>
  </security-role>
</web-app>