Java201.com

• Achieve dynamic authentication in a Web services client using a custom JAAS callback handler by Keys Botzum, Peter Van Sickel   - [Clicks: 49]
  It is often the case that a statically defined username and password in the Web services deployment descriptor is not appropriate. With the Java Authentication and Authorization Service (JAAS) callback handler described in this article, you have the option of using a properties file (or some other source) for dynamically setting username and password at run time for UsernameToken (UNT) authentication in a Web services client. This article describes a sample application that uses such a custom callback handler, enabling you to send a different username and password for each client application user.
  [Includes sample code]
  http://www.ibm.com/developerworks/websphere/techjournal/0707_botzum/0707_botzum.html - Jul, 2007
• Adapting JAAS to SOA Environments: SOA Security Service by Denis Pilipchuk   - [Clicks: 54]
  JAAS' limitations and assumptions have made it difficult to integrate with other enterprise technologies. However, by exposing it as a service, you can rely on JAAS in your SOA. Denis Pilipchuk shows how it's done.
  http://today.java.net/pub/a/today/2007/02/06/adapting-jaas-to-soa-environments.html - Feb, 2007
• Create a WebApplication secured with custom JAAS Database LoginModule & Deploy on JDeveloper 10.1.3 Embedded OC4J 10.1.3.1, Stand Alone OC4J and OPMN Managed OC4J (10g AS) by Lucas Jellema   - [Clicks: 93]
  For one of the projects I was recently involved in, we had to implement JAAS based authentication & authorization for our JSF Web Application, and we wanted to base it on the tables in our own application specifying the usernames and their roles. The users and roles can be managed through the application itself - instead of from some management console in the application server or worse still in some XML file in the middle tier.
  [Includes sample code]
  http://technology.amis.nl/blog/?p=1462 - Jan, 2007

[Top]