Re: [aerogear-dev] Aerogear Security (Picketlink)? enhancements

I fully understand the plan of not copying PL API. My concern was AGSEC API not being flexible enough. Let me give you scenario: 1/ User writes app and secures methods using @Secure annotation 2/ Later on, as app evolves, there is a need to use LDAP binding without password or auth via certificate/fingerprint/whatever  3/ Doh, app needs to be rewritten 

The issue here is that String based password is not easily extensible. Having richer API does not impose any implementation. It can be left to user to write the integration layer.