Autostart Dropwizard

Question

Does Dropwizard also support digest authentication? All I found is Basic Authentication and OAuth. Sample code for this would be nice.

If there is really no support for digest and existing code, what would be the best idea to do a digest out in DW?

The implementation of filters will lead to the destruction of resources that do not require resources.

What I have found so far:

• How to verify HMAC authentication using Dropwizard? (since 2012?)
• http://gary-rowe.com/agilestack/2012/10/23/multibit-merchant-implementing-hmac-authentication-in-dropwizard/ (maybe useful later)
• https://gist.github.com/usamadar/2912088 (HttpDigestAuthServlet handles the full digest)

Answer 1

AFAIK - the answer is no (at least officially). Currently, the only supported authentication schemes are Basic Auth + OAuth ( http://dropwizard.io/manual/auth.html ).

I also could not find third-party authenticators - sorry :(

Answer 2

Take a look at authentication packages like https://github.com/yammer/dropwizard-auth-ldap

Basically, you can create your own Authenticator, which you will use with the @User annotation on the resource endpoints. The only limitations that you have on Authenticators are that they return Optional any type you want.

This is really quite flexible, and if im not mistaken digest is just a base64 encoded string with the username: is the password malformed with the cleartext username?

so username: base64 (username: password)? It should be easy to quickly copy.