[QPID-4253] Make web UI support for BASIC authentication configurable

• Type: Improvement
• Status: Closed
• Priority: Minor
• Resolution: Fixed
• Fix Version/s: 0.19
• Component/s: Broker-J
• Assignee: Keith Wall
• Reporter: Phil Harvey
• Created: 27/Aug/12 14:11
• Updated: 04/Sep/12 16:27
• Resolved: 04/Sep/12 16:27

Description

The web management interface added in QPID-3999 currently supports BASIC authentication. When using HTTP this is an insecure authentication mechanism. We should therefore allow support for this mechanism to be configurable rather than being always enabled.

By default, we probably want BASIC to be only enabled for SSL connections.