Add an option not to require a JWT

IBMStockTrader · Jan 8, 2024 · 77f4f42 · 77f4f42
1 parent d901725
commit 77f4f42
Showing 1 changed file with 4 additions and 1 deletion.
diff --git a/src/main/liberty/config/includes/basic.xml b/src/main/liberty/config/includes/basic.xml
@@ -1,6 +1,6 @@
 <!--
        Copyright 2017-2020 IBM Corp All Rights Reserved
-       Copyright 2022-2023 Kyndryl Corp, All Rights Reserved
+       Copyright 2022-2024 Kyndryl Corp, All Rights Reserved
 
    Licensed under the Apache License, Version 2.0 (the "License");
    you may not use this file except in compliance with the License.
@@ -38,4 +38,7 @@
 
     <jwtBuilder id="defaultJWT" keyStoreRef="defaultTrustStore" keyAlias="jwtSigner" issuer="${JWT_ISSUER}" audiences="${JWT_AUDIENCE}" />
     <mpJwt id="stockTraderJWT" audiences="${JWT_AUDIENCE}" issuer="${JWT_ISSUER}" keyName="jwtSigner" ignoreApplicationAuthMethod="false" expiry="12h" sslRef="defaultSSLConfig"/>
+
+    <webAppSecurity displayAuthenticationRealm="true" logoutOnHttpSessionExpire="true" preserveFullyQualifiedReferrerUrl="true"
+        trackLoggedOutSSOCookies="true" ssoCookieName="StockTraderSSO" useOnlyCustomCookieName="true" ssoUseDomainFromURL="true"/>
 </server>