[jboss-jira] [JBoss JIRA] (SECURITY-674) allow overriding "secret" private key in SecureIdentityLoginModule

allow overriding "secret" private key in SecureIdentityLoginModule ------------------------------------------------------------------ Key: SECURITY-674 URL: https://issues.jboss.org/browse/SECURITY-674 Project: PicketBox (JBoss Security and Identity Management) Issue Type: Feature Request Security Level: Public(Everyone can see) Affects Versions: PicketBox_v4_0_7 Reporter: Radai Rosenblatt Assignee: Stefan Guilhen SecureIdentityLoginModule uses a private key (a string) in its encode() and decode() methods. now, this being open source, said key isnt very private :-) it'd be very nice if i could somehow override this magic string at runtime - a system property (or any more secure way you can come up with)