This should likely just create an Undertow deployment programatically and enable HTTP BASIC authentication similar to the non servlet case but now using the servlet level integration.