arjan tijms [
https://community.jboss.org/people/atijms] commented on the document
"JBoss AS7: Enabling JASPI Authentication for Web Applications"
To view all comments on this document, visit:
https://community.jboss.org/docs/DOC-17782#comment-11490
--------------------------------------------------
@anilsaldhana
Anil Saldhana wrote:
Unless we get JASPI rock solid as a specification and get people to actually get into
that mode, we cannot just make it the default.
One issue that I encountered that seems spec related, is that JASPIC modules do not seem
to get invoked whenever HttpServletRequest#login is called. Anil, do you know anything
about this? Is this a spec loophole?
--------------------------------------------------