Sun Java System Application Server 9.1 Application Deployment Guide

request-protection

Defines the authentication policy requirements of the application’s request processing.

Superelements

message-security (sun-web.xml, sun-ejb-jar.xml, sun-application-client.xml)

Subelements

none

Attributes

The following table describes attributes for the request-protection element.

Table A–94 request-protection Attributes

Attribute 

Default 

Description 

auth-source

none 

Specifies the type of required authentication, either sender (user name and password) or content (digital signature).

auth-recipient

none 

Specifies whether recipient authentication occurs before or after content authentication. Allowed values are before-content and after-content.