[security-dev] Credential validation and storage

[Pete Muir]

On 18 Oct 2012, at 14:19, Anil Saldhana wrote:

> Actually Darran, Pedro and I were discussing IDM for AS and we felt that the presence of events and event handlers is needed for the credential process. This will allow setting additional hashes as attributes on the User object.

I would suggest doing this as an SPI (so that an event bus can be plugged in, and we don't provide one), not an API, as CDI already offers an eventing facility and is the way we want to promote people doing events in most cases.