java-tutorials/apache-tomcat/sso/webapps/ping/WEB-INF/web.xml

<?xml version="1.0" encoding="UTF-8"?>
<web-app
  xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
  xmlns="http://java.sun.com/xml/ns/javaee"
  xsi:schemaLocation="http://java.sun.com/xml/ns/javaee http://java.sun.com/xml/ns/javaee/web-app_4_0.xsd"
  id="ping"
  version="3.0">
    <display-name>Ping</display-name>

    <security-constraint>
        <display-name>Ping Login Auth</display-name>
        <web-resource-collection>
            <web-resource-name>PingRestrictedAccess</web-resource-name>
            <url-pattern>/private/*</url-pattern>     
        </web-resource-collection>
        <auth-constraint>
            <role-name>admin</role-name>        
        </auth-constraint>
        <user-data-constraint>
            <transport-guarantee>NONE</transport-guarantee>     
        </user-data-constraint>
    </security-constraint>

    <security-role>
        <role-name>admin</role-name>
    </security-role>

    <login-config>
        <auth-method>FORM</auth-method>
        <form-login-config>
            <form-login-page>/logging.html</form-login-page>
            <form-error-page>/logging_error.html</form-error-page>       
        </form-login-config>
    </login-config>

    <filter>
        <filter-name>PingExpiresFilter</filter-name>
        <filter-class>org.apache.catalina.filters.ExpiresFilter</filter-class>
        <init-param>
            <param-name>ExpiresByType text/html</param-name>
            <param-value>access plus 0 seconds</param-value>
        </init-param>
    </filter>

    <filter-mapping>
        <filter-name>PingExpiresFilter</filter-name>
        <url-pattern>/private/*</url-pattern>
        <dispatcher>REQUEST</dispatcher>
    </filter-mapping>
</web-app>