What is Container-Based Authentication?

Question

I know the "XMLHttpRequest" object supports a method "open" which has an optional parameter of a username and password. I just found out that these parameters can be supplier for requests requiring container-based authentication.

This is the method signature:

open(method, url, async, username, password)

Can someone help me out with the meaning of Container-Based Authentication?

Answer 1

Container-Based means that the container of the web application (e.g. tomcat, jboss, etc.) performs the authentication, and makes the results of the authentication known to your web application.

As a consequence, your web application doesn't need to implement NTLM, HTTP Basic, or any authentication code, because the container already does all that.