Bug 2942: odl-mdsal-apidocs feature is not protected through AAA
[controller.git] / opendaylight / md-sal / sal-rest-docgen / src / main / resources / WEB-INF / web.xml
1 <?xml version="1.0" encoding="ISO-8859-1"?>
2 <web-app xmlns="http://java.sun.com/xml/ns/javaee" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
3     xsi:schemaLocation="http://java.sun.com/xml/ns/javaee http://java.sun.com/xml/ns/javaee/web-app_3_0.xsd"
4     version="3.0">
5     <welcome-file-list>
6         <welcome-file>index.html</welcome-file>
7     </welcome-file-list>
8     <servlet>
9         <servlet-name>JAXRSApiDoc</servlet-name>
10         <servlet-class>com.sun.jersey.spi.container.servlet.ServletContainer</servlet-class>
11         <init-param>
12             <param-name>javax.ws.rs.Application</param-name>
13             <param-value>org.opendaylight.controller.sal.rest.doc.jaxrs.ApiDocApplication</param-value>
14         </init-param>
15         <!-- AAA Auth Filter -->
16         <init-param>
17             <param-name>com.sun.jersey.spi.container.ContainerRequestFilters</param-name>
18             <param-value> org.opendaylight.aaa.sts.TokenAuthFilter</param-value>
19         </init-param>
20         <load-on-startup>1</load-on-startup>
21     </servlet>
22
23     <servlet-mapping>
24         <servlet-name>JAXRSApiDoc</servlet-name>
25         <url-pattern>/apis/*</url-pattern>
26     </servlet-mapping>
27
28     <filter>
29         <filter-name>cross-origin-api-doc</filter-name>
30         <filter-class>org.eclipse.jetty.servlets.CrossOriginFilter</filter-class>
31         <init-param>
32             <param-name>allowedOrigins</param-name>
33             <param-value>*</param-value>
34         </init-param>
35         <init-param>
36             <param-name>allowedMethods</param-name>
37             <param-value>GET,POST,OPTIONS,DELETE,PUT,HEAD</param-value>
38         </init-param>
39         <init-param>
40             <param-name>allowedHeaders</param-name>
41             <param-value>origin, content-type, accept, authorization</param-value>
42         </init-param>
43     </filter>
44     <filter-mapping>
45         <filter-name>cross-origin-api-doc</filter-name>
46         <url-pattern>/apis/*</url-pattern>
47     </filter-mapping>
48
49
50     <security-constraint>
51       <web-resource-collection>
52         <web-resource-name>API Doc</web-resource-name>
53         <url-pattern>/*</url-pattern>
54       </web-resource-collection>
55     </security-constraint>
56
57 </web-app>