// By this point if an authenticator could have been defined it would have been.
if (auth == null) {
if (authenticationMechanisms.size() > 0) {
// An authentication mechanism not supported for HTTP has been requested, disable access.
auth = new FourZeroThreeAuthenticator();
} else {
// The existence of the realm could have enabled SSL without mandating authentication.
auth = new AnonymousAuthenticator();
}
}