The JAAS Package

The JAAS package is composed of a number of classes and interfaces. While it is beyond the scope of this chapter to cover all of the classes, it is worthwhile to cover some of the more commonly used classes, listed in Table 9-1.

Together these classes provide the authentication and authorization services of JAAS.

The Subject Class

The Subject class represents the object of our security. An instance of the Subject class would contain one or more principals that represent the authenticated identity of our subject. The Subject class is the result of the JAAS authentication process. If a JAAS login process is successful, then it will result in a subject and associated principals for the login. The Subject class also provides authorization ...

Get J2EE™ and Beyond: Design, Develop, and Deploy World-Class Java™ Software now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.