web.xml

<?xml version="1.0" encoding="UTF-8"?>
<web-app version="2.5" xmlns="http://java.sun.com/xml/ns/javaee"
    xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
    xsi:schemaLocation="http://java.sun.com/xml/ns/javaee http://java.sun.com/xml/ns/javaee/web-app_2_5.xsd">

    <!-- SERVLET DEFINITIONS -->

    <filter>
        <filter-name>ServletAdaptor</filter-name>
        <filter-class>com.sun.jersey.spi.container.servlet.ServletContainer</filter-class>
        <init-param>
            <param-name>com.sun.jersey.spi.container.ResourceFilters</param-name>
            <param-value>com.sun.jersey.api.container.filter.RolesAllowedResourceFilterFactory</param-value>
        </init-param>
        <init-param>
            <param-name>com.sun.jersey.config.feature.Redirect</param-name>
            <param-value>true</param-value>
        </init-param>
        <init-param>
            <param-name>com.sun.jersey.config.feature.ImplicitViewables</param-name>
            <param-value>true</param-value>
        </init-param>
        <init-param>
            <param-name>com.sun.jersey.config.property.packages</param-name>
            <param-value>de.tud.lai.konnex</param-value>
        </init-param>
        <init-param>
            <param-name>com.sun.jersey.config.property.WebPageContentRegex</param-name>
            <param-value>/(webapp-css|webapp-images|webapp-js)/.*</param-value>
            <!-- DISABLES THE FORWARDING TO THE CLASS "MainResource" FOR WEBAPP DATA (css,js,images,..) -->
        </init-param>
        <init-param>
            <param-name>com.sun.jersey.config.property.JSPTemplatesBasePath</param-name>
            <param-value>/WEB-INF/jsp</param-value>
        </init-param>
    </filter>

    <filter-mapping>
        <filter-name>ServletAdaptor</filter-name>
        <url-pattern>/*</url-pattern>
    </filter-mapping>

    <session-config>
        <session-timeout>30</session-timeout>
    </session-config>

    <!-- SECURITY DEFINITIONS -->
    <security-role>
        <description>system administrators</description>
        <role-name>admin</role-name>
    </security-role>

    <security-role>
        <description>web application user</description>
        <role-name>user</role-name>
    </security-role>

    <security-constraint>
        <web-resource-collection>
            <web-resource-name>konnex services</web-resource-name>
            <url-pattern>/services/*</url-pattern>
            <http-method>GET</http-method>
            <http-method>POST</http-method>
            <http-method>PUT</http-method>
            <http-method>DELETE</http-method>
        </web-resource-collection>

        <auth-constraint>
            <role-name>admin</role-name>
            <role-name>user</role-name>
        </auth-constraint>

        <user-data-constraint>
            <!-- transport-guarantee can be CONFIDENTIAL, INTEGRAL, or NONE -->
            <transport-guarantee>CONFIDENTIAL</transport-guarantee>
        </user-data-constraint>
    </security-constraint>

    <login-config>
        <auth-method>FORM</auth-method>
        <realm-name>webapprealm</realm-name>
        <form-login-config>
            <form-login-page>/WEB-INF/jsp/user-management/login.jsp</form-login-page>
            <form-error-page>/WEB-INF/jsp/user-management/login-fail.jsp</form-error-page>
        </form-login-config>
    </login-config>

    <!-- ERROR PAGES <error-page> <error-code>403</error-code> <location>/WEB-INF/jsp/error-pages/403.jsp</location>
        </error-page> <error-page> <error-code>404</error-code> <location>/WEB-INF/jsp/error-pages/404.jsp</location>
        </error-page> -->

</web-app>