[security-dev] Undertow IDM

[Pedro Igor Silva]

I think PL IDM can supply most of the methods defined in the IdentityManager interface.

Only not sure about the somethings related with password reset and account locking. Althought the Credential API maintains the history of password updates and custom attributes can also be used. Not sure, but maybe we should have that in PL IDM, built-in support for password reset and account locking.

Regarding DIGEST authentication and the getPassword method, if using PL IDM this method is not necessary because we always store the HA1 value (MD5(username:realm:password)). So you only need to pass the provided password that it will be checked internally.

Regards.
Pedro Igor

----- Original Message -----
From: "Anil Saldhana" <Anil.Saldhana at redhat.com>
To: security-dev at lists.jboss.org
Sent: Wednesday, April 24, 2013 3:54:48 PM
Subject: [security-dev] Undertow IDM

Hi all,
https://github.com/undertow-io/undertow/tree/master/core/src/main/java/io/undertow/security/idm

I am wondering how we can use PicketLink IDM in Undertow.

Regards,
Anil
_______________________________________________
security-dev mailing list
security-dev at lists.jboss.org
https://lists.jboss.org/mailman/listinfo/security-dev