Authentication Issues while calling from OSB to REST

Question

I am routing from a proxy Service in OSB to a REST ful Web Services.I need to apply security settings while calling REST ful services so i created groups which has users who can only call the Web Services.I did all the security settings in the weblogic Server console.
The authentication works fine but the problem is that when i doesnot give any username or password it should give me a "Authentication required" error.But instead it calls the web services .I need not want that to happen.
Anyone pls help me in this issue

Answer 1

My proxy service uses a http protocol and gets the query string and routes it to the business service which is a REST ful based web services.My need is to apply security settings betwwen business service and service component(REST ful based web services).
I created the security settings in weblogic server console using the following steps
1.I created an user in the user and groups option in the security realm tab with Default Authenticator as provider selected
2.I created a Stand-Alone Web Application Scoped Role in the application scope in the security tab with XACML RoleMapper as the provider selected in the war(REST ful web services) file deployed in the console.
3.I added the user created in the security realm tab in this Stand-Alone Web Application Scoped Role created.
I then tested the business service(which connects to the REST ful web service component) with username and password in the transport option in testing console as the one created in the server console.
The business service gives the response only when the username and password matches to the one created or when username/password is weblogic/welcome1(this is the username and password given while creating the OSB domain).
It should throw me an Authentication failed error when the username is wrong and that works except for the condition that the username and password is empty.
How to make the service to throw an error when the username and password is empty like the same as when the username is mismatched.
Help me out in this issue.