Based on this Jaspic Example I wrote the following validateRequest method for a ServerAuthModule: public AuthStatus validateRequest(MessageInfo messageInfo, Subject clientSubject, Subject service...

I'm studying JAAS and I'm implementing a simple example to use in a webapp using Tomcat with a JaasRealm. Now my problem is that I don't know how to retrieve the subject since code like Subject s...

I have developed a Security Authentication Module (SAM) and implemented the validateRequest method. I also have a simple webapp configured to use this SAM. In my validateRequest method, I check th...

I'll be honest. I've been a developer for a quite some time now but its the first time I've heard of JACC ans JASPIC. I understand that they are standards used by authorization providers, but how e...

I am currently using Oracle ADF (which is an end-to-end Java EE framework) for building my web applications and GlassFish 3.1 as application server. The latter supports JAAS (declarative inside it...

I'm currently working on a web application based on Java EE 7, PostgreSQL and the application server GlassFish 4. I need to implement a form based authentication, and to secure some URL knowing tha...

On Jetty's main project page compatibility with JASPI (JASPIC/JSR 196) is mentioned. However, the distribution of Jetty 8 does not seem to contain any classes related to JASPI. There's a jetty-sec...

I'm writing a java web application which need to perform login through a webservice. Of course, none of the realms supplied with the application server I'm using (glassfish v2) can do the trick. I ...