I have a Java web app running on Tomcat 8.5. The app uses the SpnegoHttpFilter configured in the app's web.xml. This configuration includes some site-specific values like spnego.preauth.username and spnego.preauth.password.
I would like to move these values outside of the web.xml, preferably to the Tomcat Context Container xml file, usually located in CATALINA_BASE/conf/Catalina/localhost/MyApp.xml.
Looking at the documentation for web.xml, while it has overrides for many web.xml items, I didn't see a filter override. Instead the documentation on filters says it can be for all web applications in $CATALINA_BASE/conf/web.xml or for a single app in WEB-INF/web.xml.
Is there a way to configure filter parameters for a single application from outside the .war, at the Tomcat instance level?