16.5. JAX-RS Application Security

Procedure 16.3. Enable Role-Based Security for a RESTEasy JAX-RS Web Service

1. Open the web.xml file for the application in a text editor.
2. Add the following <context-param> to the file, within the web-app tags:

   <context-param>
       <param-name>resteasy.role.based.security</param-name>
       <param-value>true</param-value>
   </context-param>
   

   Copy to Clipboard Toggle word wrap
3. Declare all roles used within the RESTEasy JAX-RS WAR file, using the <security-role> tags:

   <security-role>
       <role-name>ROLE_NAME</role-name>
   </security-role>
   <security-role>
       <role-name>ROLE_NAME</role-name>
   </security-role>

   Copy to Clipboard Toggle word wrap
4. Authorize access to all URLs handled by the JAX-RS runtime for all roles:

   <security-constraint>
       <web-resource-collection>
   	<web-resource-name>Resteasy</web-resource-name>
   	<url-pattern>/PATH</url-pattern>
       </web-resource-collection>
       <auth-constraint>
   	<role-name>ROLE_NAME</role-name>
   	<role-name>ROLE_NAME</role-name>
       </auth-constraint>
   </security-constraint>

   Copy to Clipboard Toggle word wrap