JSF 2中的程序化身份验证带来了身份验证弹出

Question

对于我们的Web应用程序（在Websphere 8.5上运行），我们使用基本HTTP身份验证进行编程登录，如（https://stackoverflow.com/a/2207147/2683081）所示，即Servlet 3.0 HttpServletRequest＃login（）。

使用我们的应用程序登录页面登录后，我不断收到第二个登录屏幕，并显示消息

  

Default Realm的服务器__需要用户名和密码

有没有办法避免获得标准的Windows安全弹出窗口。

我尝试使用授权设置响应标头，但没有运气。

更新： - 应用程序在带有LDAP安全性的Websphere8.5上的Mojjaro JSF 2.1.28上

       <?xml version="1.0" encoding="UTF-8"?>
    <web-app version="3.0"
        xmlns="http://java.sun.com/xml/ns/javaee"
        xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
        xsi:schemaLocation="http://java.sun.com/xml/ns/javaee http://java.sun.com/xml/ns/javaee/web-app_3_0.xsd" >
      <display-name>TEST</display-name>
      <welcome-file-list>
        <welcome-file>index.jsf</welcome-file>
      </welcome-file-list>

      <!-- Spring -->
        <listener>
        <listener-class>
                org.springframework.web.context.request.RequestContextListener
            </listener-class>
      </listener>
      <listener>
        <listener-class>
                org.springframework.web.context.ContextLoaderListener
            </listener-class>
      </listener>
      <!-- end Spring-->
      <context-param>
            <param-name>javax.faces.INTERPRET_EMPTY_STRING_SUBMITTED_VALUES_AS_NULL</param-name>
            <param-value>true</param-value>
      </context-param>      
      <context-param>      
        <param-name>com.sun.faces.expressionFactory</param-name> 
        <param-value>org.jboss.el.ExpressionFactoryImpl</param-value>    
      </context-param> 
       <listener>
            <listener-class>com.sun.faces.config.ConfigureListener</listener-class>
       </listener>

       <context-param>
            <param-name>javax.faces.STATE_SAVING_METHOD</param-name>
            <param-value>server</param-value>
        </context-param>

        <context-param>
             <param-name>javax.faces.PARTIAL_STATE_SAVING</param-name>
             <param-value>false</param-value>
         </context-param>   
        <!-- Faces Servlet -->
        <servlet>
            <servlet-name>Faces Servlet</servlet-name>
            <servlet-class>javax.faces.webapp.FacesServlet</servlet-class>
            <load-on-startup>1</load-on-startup>
        </servlet>
        <servlet-mapping>
            <servlet-name>Faces Servlet</servlet-name>
            <url-pattern>*.jsf</url-pattern>
        </servlet-mapping>

        <context-param>
            <param-name>primefaces.THEME</param-name>
            <param-value>casablanca</param-value>
        </context-param>
<security-constraint>
        <display-name>constraint-0</display-name>
        <web-resource-collection>
            <web-resource-name>constraint-0</web-resource-name>
            <description/>
            <url-pattern>/test/*</url-pattern>
        </web-resource-collection>
        <auth-constraint>
            <description/>
            <role-name>admin</role-name>
            <role-name>guest</role-name>
        </auth-constraint>
    </security-constraint>
    <security-role>
    <role-name>admin</role-name>
    </security-role>
    <security-role>
    <role-name>guest</role-name>
    </security-role>
      <!-- Mime Mapping -->
        <mime-mapping>
        <extension>png</extension>
        <mime-type>image/png</mime-type>
        </mime-mapping>
    </web-app>

login.xhtml

<h:form id="login">                 
    <div class="inputlabel">
        <h:outputLabel for="username" value="Login:"/>
    </div>
    <div>
        <h:inputText value="#{loginBean.username}" id="username" size="25" />
    </div>
    <div class="inputlabel">
        <h:outputLabel for="password" value="Password:"/>
    </div>
    <div>
        <h:inputText value="#{loginBean.password}" id="password" size="25" />
    </div>
    <div>
        <h:commandButton action="#{loginBean.login}" value="Login" />
    </div>                  
</h:form>

LoginBean.java

public String login() throws IOException {
    FacesContext context = FacesContext.getCurrentInstance();
    ExternalContext externalContext = context.getExternalContext();
    HttpServletRequest request = (HttpServletRequest) externalContext.getRequest();
    try {       
        request.login(username, password);            
        return "/testing/index.jsf?faces-redirect=true";
    } catch (ServletException e) {       
        context.addMessage(null, new FacesMessage("Invalid login!!!"));        
    }
}