<http-method>

An optional tag used in a <web-resource-collection> to list HTTP methods which are protected.

If none are defined, all methods are protected (recommended).

Example, to only protect GET methods:

<http-method>GET</http-method>

See Also

• web.xml Reference Page - for a full example of a security constraint
• Security Realms - basic description of the elements required to implement authentication
• Metawerx Tomcat Realms Administrator - metawerx tool for JDBC-based authentication