Login Customization

Login Screen/View Customization

whereas the filename xslt/login-screen.xsl is configurable globally inside WEB-INF/web.xml (See parameter login-screen-xslt).

NOTE for Developers: The realm dir ($REALM_DIR) is being resolved based on the Realm.getRootDir() and Realm.getConfigFile() or rather see the YanelServlet and in particular org.wyona.yanel.servlet.security.impl.DefaultWebAuthenticatorImpl#getXHTMLAuthenticationForm(...) for further details.

Login Logic/Controller Customization

Return 401 for REST interfaces instead login screen

One can configure a resource associated with a REST interface with the resource configuration parameter

<yanel:property name="yanel:401-only-when-access-denied" value="true"/>
such that when access denied, a 401 response is being returned instead a 200 with a login screen as body.