JAAS Authentication Process

JAAS Authentication Process:

  • Creating  an Instance of Login context-using the constructor- LoginContext(String,CallbackHandler)
  • The First paramenter takes the name of the configuration file
  • Second Parameter is a callbackhander it has a Handle() method-this passes the information to the loginModule.
  • An empty Subject is created before authentication begins-this subject is passed to the login modules.On Success the SUbject is attached with credentials.
  • login() method is called to instiate the  login process-after success the application can retrive the Subject using getSubject();
  • on failure throws authentication failure exception.

Comments

Post a Comment

Popular posts from this blog

Spring MVC- Redirect from one controller to another

In spring mvc its very easy to redirect from one controller to another controller Example : @Controller @RequestMapping("/springcontroller1") public class SpringController1{ } @Controller public class SpringController2{ //thinking of redirecting on clicking on a method @RequestMapping(value = "/SpringController2cancel.abc", method = RequestMethod.POST, params = "action=cancel")     public ModelAndView cancel(@ModelAttribute("MyForm") MyForm myForm, BindingResult errors,SessionStatus sessionStatus,HttpServletRequest request) throws MyException {         ModelAndView modelAndView = new ModelAndView();                 sessionStatus.setComplete();         //redirecting to controller1         return new ModelAndView("redirect:/springcontroller1.abc");     } }
Read more

Integrating Struts2 with Spring Security using Custom Login Form

Integrating Struts2 with Spring Security involves few configurations. Add all the spring core and spring security related jars-- spring -3.0.6 Struts2-Action :gets user principal and displays it on jsp after authentication package com.prdc.spring3; import java.util.ArrayList; import javax.servlet.http.HttpServletRequest; import java.util.Iterator; import java.util.List; import java.util.Properties; import java.util.Set; import org.apache.struts2.ServletActionContext; public class HelloWorld { private String message; private String username; public String getMessage() { return message; } public void setMessage(String message) { this.message = message; } public String execute() { /*to get the authenticated username*/ HttpServletRequest request = ServletActionContext.getRequest(); this.setUsername(request.getUserPrincipal().getName()); ...
Read more