JAAS Authentication Process

JAAS Authentication Process:

  • Creating  an Instance of Login context-using the constructor- LoginContext(String,CallbackHandler)
  • The First paramenter takes the name of the configuration file
  • Second Parameter is a callbackhander it has a Handle() method-this passes the information to the loginModule.
  • An empty Subject is created before authentication begins-this subject is passed to the login modules.On Success the SUbject is attached with credentials.
  • login() method is called to instiate the  login process-after success the application can retrive the Subject using getSubject();
  • on failure throws authentication failure exception.

Comments

Post a Comment

Popular posts from this blog

defining functions clojure

(defn saysomething      " i dont want to talk to you"      [name]      (str "why is it so?" name)) #'my-clojureproject1.core/saysomething => (println (saysomething "anjana") => (defn saymorethings "what do you want to hear" [name] (str "life is a box of chocolates" name)) #'my-clojureproject1.core/saymorethings => (println (saymorethings "nirosha")             ) life is a box of chocolatesnirosha nil
Read more

Integrating Struts2 with Spring Security using Custom Login Form

Integrating Struts2 with Spring Security involves few configurations. Add all the spring core and spring security related jars-- spring -3.0.6 Struts2-Action :gets user principal and displays it on jsp after authentication package com.prdc.spring3; import java.util.ArrayList; import javax.servlet.http.HttpServletRequest; import java.util.Iterator; import java.util.List; import java.util.Properties; import java.util.Set; import org.apache.struts2.ServletActionContext; public class HelloWorld { private String message; private String username; public String getMessage() { return message; } public void setMessage(String message) { this.message = message; } public String execute() { /*to get the authenticated username*/ HttpServletRequest request = ServletActionContext.getRequest(); this.setUsername(request.getUserPrincipal().getName());
Read more