Introduction

Though Java has always had strong system-level security, it lacked an API for authentication of users (verifying that a user is who he or she claims to be) and authorization of users (verifying that a user is allowed to perform a specific operation). The Java Authentication and Authorization Service (JAAS) provides a security API for the Java language that, as the name implies, provides classes and interfaces that can be used to provide authorization and authentication services.

As applications change over time, the security components of the application must also change. An application could start as a character-based application with no user interface, and then later be developed with a GUI component for user interaction. JAAS ...

Get J2EE™ and Beyond: Design, Develop, and Deploy World-Class Java™ Software now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.