An HTTP Servlet authentication parameter that encapsulates
HTTP Servlet request and response objects.
HttpServletAuthParam may be created with null request or response
objects. The following table describes when it is appropriate to pass null:
Request Response
------- --------
ClientAuthModule.secureRequest non-null null
ClientAuthModule.validateResponse null non-null
ServerAuthModule.validateRequest non-null null
ServerAuthModule.secureResponse null non-null
As noted above, in the case of
ServerAuthModule.validateRequest the module receives
a null response object. If the implementation of
validateRequest encounters an authentication error,
it may construct the appropriate response object itself and set it
into the HttpServletAuthParam via the setResponse method. |