}

        final WebAuthenticationConfig config = new WebAuthenticationConfig();

        // host/port/realm: only set if not blank (null means "any" - AuthScope.ANY equivalent)
        final String host = paramMap.get(prefix + "host");
        if (StringUtil.isNotBlank(host)) {
            config.setHost(host);
        }