<!--********************************************************************************
 * Copyright (c) 2015-2020 Contributors to the Eclipse Foundation
 *
 * See the NOTICE file(s) distributed with this work for additional
 * information regarding copyright ownership.
 *
 * This program and the accompanying materials are made available under the
 * terms of the Eclipse Public License v. 2.0 which is available at
 * http://www.eclipse.org/legal/epl-2.0.
 *
 * SPDX-License-Identifier: EPL-2.0
 *
 ********************************************************************************-->

<web-app xmlns="http://java.sun.com/xml/ns/javaee" version="3.0">

	<security-constraint>
		<web-resource-collection>
			<web-resource-name>MDM WEB (protected)</web-resource-name>
			<url-pattern>/*</url-pattern>
		</web-resource-collection>
		<auth-constraint>
			<role-name>Admin</role-name>
			<role-name>DescriptiveDataAuthor</role-name>
			<role-name>Guest</role-name>
		</auth-constraint>
	</security-constraint>


	<security-constraint>
		<web-resource-collection>
			<web-resource-name>MDM WEB (unprotected)</web-resource-name>
			<url-pattern>/login.css</url-pattern>
			<url-pattern>/favicon.ico</url-pattern>
		</web-resource-collection>
	</security-constraint>

	<filter>
		<filter-name>MDMRequestFilter</filter-name>
		<filter-class>org.eclipse.mdm.application.MDMRequestFilter
		</filter-class>
		<init-param>
			<param-name>passThroughPrefixes</param-name>
			<param-value>/mdm</param-value>
		</init-param>
	</filter>

	<filter-mapping>
		<filter-name>MDMRequestFilter</filter-name>
		<url-pattern>/*</url-pattern>
		<dispatcher>REQUEST</dispatcher>
	</filter-mapping>

	<security-role>
		<role-name>Admin</role-name>
	</security-role>

	<security-role>
		<role-name>User</role-name>
	</security-role>
	
	<security-role>
		<role-name>Guest</role-name>
	</security-role>

	<login-config>
		<auth-method>FORM</auth-method>
		<realm-name>MDMRealm</realm-name>
		<form-login-config>
			<form-login-page>/login.jsp</form-login-page>
			<form-error-page>/error.jsp</form-error-page>
		</form-login-config>
	</login-config>

	<session-config>
		<session-timeout>20</session-timeout>
	</session-config>

</web-app>