Introduce LocalAuthenticationFactory concept and class ------------------------------------------------------ Key: ELY-736 URL: https://issues.jboss.org/browse/ELY-736 Project: WildFly Elytron Issue Type: Task Components: API / SPI Reporter: David Lloyd We have a way to handle incoming authentication requests from HTTP, SASL, and TLS sources. But we don't have an API to handle local server authentication. We should have a LocalAuthenticationFactory, which implements MechanismAuthenticationFactory for this purpose. Using JAAS as a simple model, such an API would require a class that acts as the client's login context (similarly to LoginContext), which when activated, will use the user's local AuthenticationContext to configure the identity and credentials, and yield an SI after successful authentication. Because there are many ways in which an authentication can take place, the authentication factory may have to be able to specify or restrict the range of acceptable credential types and algorithms, and even principal types. Actual local "mechanisms" might or might not be of use to accomplish this, by returning client login contexts which utilize different principal and credential strategies. For JAAS compatibility, it may be useful to be able to use this API to create a JAAS LoginModule which can use the local authentication factory to perform JAAS logins, wrapping the SI inside the JAAS Subject in whichever way we decide is correct.