resin配置 security 进行认证

<security-constraint>
   <web-resource-collection>
    <web-resource-name>Protected Context</web-resource-name>
    <url-pattern>/*</url-pattern>   <!--保护的资源范围-->
   </web-resource-collection>
   <auth-constraint role-name='admin' />   <!--只允许admin角色的用户进行访问-->
</security-constraint>

<authenticator type="com.caucho.server.security.XmlAuthenticator">
   <init>
    <user name='admin' password='admin' roles='admin' />
    <password-digest>none</password-digest>
   </init>
</authenticator>


<login-config>
   <auth-method>BASIC</auth-method> <!--采用basic认证-->
   <!--
    <form-login-config> <form-login-page>/login.jsp</form-login-page>
    <form-error-page>/error.jsp</form-error-page> </form-login-config>
   -->
</login-config>