jaas getCredentials()

Thread view:

block.oliver@googlemail.com - 25 Jun 2009 15:49 GMT

Hello everybody,

I've read the jaas authentication and authorization tutorials. What's
still not clear to me is "who" is responsible for storing credentials
in the subject? Unfortunately I have not found anything explaining
that.

Another point: The sample Authorizion file (SampleAzn.java) does a
login everytime the authorized action takes place. Is that really
needed? I mean, if the user once hat authenticated, it should be
sufficient, shouldn't it?

Best Regards,

Oliver Block

Reply to this Message

block.oliver@googlemail.com - 25 Jun 2009 18:47 GMT

On 25 Jun., 16:49, "block.oli...@googlemail.com"
<block.oli...@googlemail.com> wrote:

> Hello everybody,
>
> I've read the jaas authentication and authorization tutorials. What's
> still not clear to me is "who" is responsible for storing credentials
> in the subject? Unfortunately I have not found anything explaining
> that.

I've found a paragraph which suggests that this is done by the login
module in commit(), just as associating the Principals with the
subject.

Reply to this Message

Free Magazines

Get these publications absolutely FREE for up to 12 months. There are no hidden fees and no obligation. Simply choose a title, complete the application form and submit it. Read more ...