Currently, I am working on building an application using AngularJS for the front-end and JavaEE for the back-end. In my AngularJS application, I am trying to access a REST resource provided by the back-end which is protected with JAAS authentication, allowing only authenticated users to access it.
In my AngularJS app:
$http.get('/webresources/project/').success(function(data){...}).error(function(){...});
The project resource is protected by the configuration in my web.xml file:
...
<login-config>
<auth-method>BASIC</auth-method>
<realm-name>file</realm-name>
</login-config>
<security-constraint>
<web-resource-collection>
<web-resource-name>Protected Area</web-resource-name>
<url-pattern>/webresources/*</url-pattern>
</web-resource-collection>
<auth-constraint>
<role-name>user</role-name>
</auth-constraint>
</security-constraint>
...
However, when attempting to access this resource without authentication, the browser prompts for login credentials and the request remains pending until canceling, resulting in a 401 response with the WWW-Authenticate header.
I am looking for a way to bypass the default browser login prompt and implement my own login form instead. I have come across some solutions but unsure of how to proceed:
1- Disable sending the WWW-Authenticate header from the back-end. How can this be achieved in Java?
2- Send a different status code other than 401. Is this a recommended approach? If so, how to accomplish this?
Thank you for your assistance.