| org.jbpm.identity.security |
|
adapts the identity model data to JAAS with an implementation
of a LoginModule and a Policy. The login module validates
the user/password combination and associates a User (=Principal)
with the Subject. The policy uses the Permissions that are
specified in the identity data (accessed by an IdentitySession)
to validate access.
|
| Java Source File Name | Type | Comment |
| AuthenticatedUser.java | Class | |
| IdentityLoginModule.java | Class | jaas login module that, in case of successfull verification, adds the
org.jbpm.identity.User as a principal to the subject. |
| IdentityPolicy.java | Class | a java.security.Policy implementation that in combination with the
IdentityLoginModule enforces the secirity permissions modelled as
in the package org.jbpm.identity. |
| IdentityService.java | Interface | decouples the IdentityLoginModule from the underlying medium that stores the users, groups, memberships and permissions. |
| Password.java | Class | the password as a private credential of a Subject. |
| Username.java | Class | the username as a public credential of a Subject. |