Dipeloco

package br.com.dipeloco;
 
public class Departamento implements Cloneable {
	private String nome;
 
	public String getNome() {
		return nome;
	}
 
	public void setNome(String nome) {
		this.nome = nome;
	}
 
	protected Object clone(){
		try {
			return super.clone();
		} catch (CloneNotSupportedException e) {
			/*Deve ser tratado em um projeto real*/
			e.printStackTrace();
			return null;
		}
	}
}
 
package br.com.dipeloco;
 
 
public class Funcionario implements Cloneable {
 
	private String nome;
	private String telefone;
	private String email;
	private Departamento departamento;
 
	/*OMITINDO GETTERS E SETTERS*/	
 
	/*
	 * SHALLOW COPY
	 * */
	protected Object clone(){
		try {
			return super.clone();
		} catch (CloneNotSupportedException e) {
			e.printStackTrace();
			return null;
		}
	}
 
	protected Object deepClone() {
		Funcionario funcionario = null;
		try {
			funcionario = (Funcionario) super.clone();
		} catch (CloneNotSupportedException e) {
			e.printStackTrace();
			return null;
		}
		funcionario.departamento = (Departamento) this.departamento.clone();
		return funcionario;
	}
}

	<security-constraint>
		<display-name>HTTPS</display-name>
		<web-resource-collection>
			<description>Solicita HTTPS</description>
			<web-resource-name>HTTPS</web-resource-name>
			<url-pattern>/certificado/teste</url-pattern> (Aqui  deve conter a URL que precisa de https)
			<http-method>GET</http-method>
			<http-method>POST</http-method>
		</web-resource-collection>
		<auth-constraint>
			<role-name>GERENTE</role-name>
		</auth-constraint>
	<user-data-constraint>
		<description>
			Tipo de Troca de informação entre client-server
		</description>
		<transport-guarantee>CONFIDENTIAL</transport-guarantee>
	</user-data-constraint>
</security-constraint>

<login-config>
	<auth-method>BASIC</auth-method>
</login-config>

<security-role>
	<description>Role do Gerente</description>
	<role-name>GERENTE</role-name>
</security-role>

<Connector port="8443" protocol="HTTP/1.1" SSLEnabled="true"
maxThreads="150" scheme="https" secure="true"
clientAuth="false" sslProtocol="TLS"
keystoreFile="f:\certificate\certificate.pfx"
keystorePass="prime123"
keystoreType="PKCS12"/>

import java.security.Principal;
import java.util.Set;
 
public class User implements Principal {
 
	private String name;
	private Set<String> roles;
	/*OMITINDO GETTERS E SETTERS*/
}
 
/***********************************/
 
import java.security.Principal;
 
public class Role implements Principal {
	private String name;
	public Role(String name){
		this.name = name;
	}
	/*OMITINDO GETTERS E SETTERS*/
}
 
/*********************************/
 
import java.io.IOException;
import java.util.HashSet;
import java.util.Iterator;
import java.util.Map;
import java.util.Set;
 
import javax.security.auth.Subject;
import javax.security.auth.callback.Callback;
import javax.security.auth.callback.CallbackHandler;
import javax.security.auth.callback.NameCallback;
import javax.security.auth.callback.PasswordCallback;
import javax.security.auth.callback.UnsupportedCallbackException;
import javax.security.auth.login.LoginException;
import javax.security.auth.spi.LoginModule;
 
public class LoginModuleImpl implements LoginModule,WebServiceKeys {
 
	private Subject subject;
	private CallbackHandler callbackHandler;
	private Map sharedState;
	private Set<String> roles = new HashSet<String>();
	private User user;
 
	public boolean abort() throws LoginException {
		logout();
		subject = null;
		callbackHandler  = null;
		sharedState = null;;
		roles = null;
		user = null;
		return false;
	}
 
	public boolean commit() throws LoginException {
		if (user != null && !subject.getPrincipals().contains(user)) {
			subject.getPrincipals().add(user);
		}
		if (roles != null) {
			Iterator<String> it = roles.iterator();
			while (it.hasNext()) {
				Role role = new Role((String)it.next());
				if (!subject.getPrincipals().contains(role)) {
					subject.getPrincipals().add(role);
				}
			}
		}
		return true;
	}
 
	public void initialize(Subject subject, CallbackHandler callbackHandler,Map sharedState, Map options) {
		this.subject = subject;
		this.callbackHandler = callbackHandler;
		this.sharedState = sharedState;
	}
 
	public boolean login() throws LoginException {
		Callback[] callbacks = new Callback[2];
		callbacks[0] = new NameCallback("Login");
		callbacks[1] = new PasswordCallback("Senha", true);
		System.out.println("inicio do processo de autenticação");
		try {
			callbackHandler.handle(callbacks);
		} catch (IOException e) {
			e.printStackTrace();
		} catch (UnsupportedCallbackException e) {
			e.printStackTrace();
		}
 
		String login = ((NameCallback) callbacks[0]).getName();
		String senhaInformada = new String(((PasswordCallback) callbacks[1]).getPassword());
		/*FAÇA AVALIDACAO DO LOGIN INFORMADO*/
		if(login.equalsIgnoreCase("marcelo") &amp;&amp; senhaInformada.equals("teste123")){
			user = new User();
			user.setName("Marcelo Bueno de Campos");
			roles.add("GERENTE");
			user.setRoles(roles);
			sharedState.put("javax.security.auth.principal", user);
			sharedState.put("javax.security.auth.roles", roles);
		}else{
			return false;
		}
		return true;
	}
	public boolean logout() throws LoginException {
		subject.getPrincipals().removeAll(roles);
		subject.getPrincipals().remove(user);
		return true;
	}
}

login{
br.com.prime.webservice.LoginModuleImpl required;
};

<Realm className="org.apache.catalina.realm.JAASRealm"
appName="login"
userClassNames="Nome completo da classe <strong>User</strong> criada no projeto separado"
roleClassNames="Nome completo da classe <strong>Role</strong> criada no projeto separado"
debug="0"/>

-Xms256M -Xmx512M -XX:PermSize=32M -XX:MaxPermSize=128M -Dcom.sun.management.jmxremote.port=3333 -Dcom.sun.management.jmxremote.authenticate=false -Dcom.sun.management.jmxremote.ssl=false -Djava.security.auth.login.config==<strong>c:\login.config</strong> (configure aqui o caminho onde você gerou o seu arquivo de login.config)