[jboss-dev-forums] [PicketBox Development] - AS7 : Authentication and Authorization

[Marcus Moyses]

Marcus Moyses [http://community.jboss.org/people/mmoyses] created the discussion

"AS7 : Authentication and Authorization"

To view the discussion, visit: http://community.jboss.org/message/582428#582428

--------------------------------------------------------------
For AS7 I'm thinking about rewriting all our login modules to separate authentication (caller principal mapping) from authorization (role mapping) during the JAAS process.
Currently the majority of our login modules does both things: validates password to assign the user principal to the subject and adds the roles to the subject.
In my opinion this is getting messy as new functionality needs to be added to login modules to allow different combinations of them so customers can use only one for authentication and another for role mapping. This is bad as we keep adding new options to the LMs in order to accomodate such features.
If we separate the functionalities I believe the code will be easier to manage, to extend (subclass for custom needs), to configure and it will also allow for many other combinations to suit every need.
What do you think?
--------------------------------------------------------------

Reply to this message by going to Community
[http://community.jboss.org/message/582428#582428]

Start a new discussion in PicketBox Development at Community
[http://community.jboss.org/choose-container!input.jspa?contentType=1&containerType=14&container=2088]

-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.jboss.org/pipermail/jboss-dev-forums/attachments/20110121/0de9136c/attachment.html