<html><head><meta http-equiv="Content-Type" content="text/html charset=us-ascii"></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" class="">Hi Claudio,<div class=""><br class=""></div><div class="">Thanks for your comment, I have upvoted it on my Stackoverflow thread. Arjan wrote the answer I have accepted, which can be found at <a href="http://stackoverflow.com/a/38976889/2104280" class="">http://stackoverflow.com/a/38976889/2104280</a> .</div><div class=""><br class=""></div><div class="">Turns out the session behaviour for the login call is not really defined in Servlet 3.0 and may be improved in JSR 375.</div><div class=""><br class=""></div><div class="">Thanks for your answers!</div><div class=""><br class=""></div><div class="">Jan-Willem</div><div class=""><br class=""></div><div class=""> <br class=""><div><blockquote type="cite" class=""><div class="">On 16 Aug 2016, at 17:25, Claudio Miranda <<a href="mailto:claudio@claudius.com.br" class="">claudio@claudius.com.br</a>> wrote:</div><br class="Apple-interchange-newline"><div class="">On Tue, Aug 16, 2016 at 4:55 AM, Jan-Willem Gmelig Meyling<br class=""><<a href="mailto:jan-willem@youngmediaexperts.nl" class="">jan-willem@youngmediaexperts.nl</a>> wrote:<br class=""><blockquote type="cite" class="">And my `web.xml`:<br class=""><br class=""> <login-config><br class=""> <auth-method>BASIC</auth-method><br class=""> <realm-name>MyRealm</realm-name><br class=""> </login-config><br class=""></blockquote><br class="">As you want programmatic authentication, there is no need of <login-config><br class=""><br class=""><br class=""><br class=""><br class=""><br class="">-- <br class=""> Claudio Miranda<br class=""><br class=""><a href="mailto:claudio@claudius.com.br" class="">claudio@claudius.com.br</a><br class="">http://www.claudius.com.br<br class=""></div></blockquote></div><br class=""></div></body></html>