Interface IdentityStoreHandler
-
public interface IdentityStoreHandlerIdentityStoreHandleris a mechanism for validating a caller's credentials, and accessing a caller's identity attributes, by consulting a set of one or moreIdentityStores.It is intended for use by an authentication mechanism, such as an
HttpAuthenticationMechanism(Jakarta Security) or aServerAuthModule(Jakarta Authentication).Beans should inject only this handler, and not
IdentityStoredirectly, as multiple stores may exist.Implementations of Jakarta Security must supply a default implementation of
IdentityStoreHandlerthat behaves as described in the Jakarta Security specification document. Applications do not need to supply anIdentityStoreHandlerunless application-specific behavior is desired.
-
-
Method Summary
All Methods Instance Methods Abstract Methods Modifier and Type Method Description CredentialValidationResultvalidate(Credential credential)Validate the givenCredentialand return the identity and attributes of the caller it represents.
-
-
-
Method Detail
-
validate
CredentialValidationResult validate(Credential credential)
Validate the givenCredentialand return the identity and attributes of the caller it represents.Implementations of this method will typically invoke the
validate()andgetCallerGroups()methods of one or moreIdentityStores and return an aggregated result.Note that the
IdentityStoremay check forIdentityStorePermissionifgetCallerGroups()is called and aSecurityManageris configured. (The default built-in stores do perform this check; application-supplied stores may or may not.) An implementation of this method should therefore invokegetCallerGroups()in the context of aPrivilegedAction, and arrange to be granted the appropriateIdentityStorePermissionpermission.- Parameters:
credential- The credential to validate.- Returns:
- The validation result.
-
-