When deploying a WAR file with a web.xml (auth-type=BASIC) it works as expected, there ist a HttpServerAuthenticationMechanismFactory provided by factories in AggregateServerMechanismFactory: [..BASIC..FORM..etc] thats getting active when accessing a secured resource.

When wraping that WAR inside an EAR File there is no Problem, it works equal as above.

But when deploying a second WAR with web.xml (auth-type=OIDC) inside the same EAR, the Auth Mechanism BASIC,FORM etc is not available for the first WAR!

The Log "HttpServerAuthenticationMechanismFactory provided by factories ..." is completly gone.

If both WARs use BASIC it works, and the Log message is displayed two times.

Feels like a bug, shouldnt be possible to use BASIC in on WAR and OIDC in another WAR ?