]
Darran Lofthouse updated ELY-151:
---------------------------------
Fix Version/s: 1.1.0.Beta8
(was: 1.1.0.Beta7)
Ability to supply additional information during credential
acquisition
----------------------------------------------------------------------
Key: ELY-151
URL:
https://issues.jboss.org/browse/ELY-151
Project: WildFly Elytron
Issue Type: Enhancement
Components: API / SPI, Passwords
Reporter: Darran Lofthouse
Assignee: Darran Lofthouse
Fix For: 1.1.0.Beta8
I think this is the final known gap in our credential acquisition and validation
API/SPI.
There are a couple of specifications that also allow for additional information to be
used when obtaining a representation of a users credential, the most obvious being the
session based variant of digest authentication where a nonce and cnonce are also
incorporated.
A second variant with two different modes of operation would be the realm associated with
the digest credential, currently we assume it is tightly associated with the storage
representation of the credential but it could also be the case that the mech is requesting
it for a specific realm.