Oracle神諭

            BlogJava :: 首頁 :: 新隨筆 :: 聯系 :: 聚合  :: 管理 ::
            284 隨筆 :: 9 文章 :: 106 評論 :: 0 Trackbacks
          public interface LoginModule
          
          

          LoginModule describes the interface implemented by authentication technology providers. LoginModules are plugged in under applications to provide a particular type of authentication.

          While applications write to the LoginContext API, authentication technology providers implement the LoginModule interface. A Configuration specifies the LoginModule(s) to be used with a particular login application. Therefore different LoginModules can be plugged in under the application without requiring any modifications to the application itself.

          The LoginContext is responsible<負責> for reading the Configuration and instantiating the appropriate<適當的> LoginModules. Each LoginModule is initialized with a Subject, a CallbackHandler, shared LoginModule state, and LoginModule-specific options. The Subject represents the Subject currently being authenticated and is updated with relevant<相關> Credentials<憑證> if authentication succeeds. LoginModules use the CallbackHandler to communicate with users. The CallbackHandler may be used to prompt for usernames and passwords, for example. Note that the CallbackHandler may be null. LoginModules which absolutely require a CallbackHandler to authenticate<認證> the Subject may throw a LoginException. LoginModules optionally use the shared state to share information or data among themselves.

          NameCallback:
          PasswordCallback:

          The LoginModule-specific options represent the options configured for this LoginModule by an administrator or user in the login Configuration. The options are defined by the LoginModule itself and control the behavior within it. For example, a LoginModule may define options to support debugging/testing capabilities<能力>. Options are defined using a key-value syntax, such as debug=true. The LoginModule stores the options as a Map so that the values may be retrieved using the key. Note that there is no limit to the number of options a LoginModule chooses to define.

          The calling application sees the authentication process as a single operation. However, the authentication process within the LoginModule proceeds in two distinct phases. In the first phase, the LoginModule's login method gets invoked by the LoginContext's login method. The login method for the LoginModule then performs the actual authentication (prompt for and verify a password for example) and saves its authentication status as private state information. Once finished, the LoginModule's login method either returns true (if it succeeded) or false (if it should be ignored), or throws a LoginException to specify a failure. In the failure case, the LoginModule must not retry the authentication or introduce delays. The responsibility of such tasks belongs to the application. If the application attempts to retry the authentication, the LoginModule's login method will be called again.

          In the second phase, if the LoginContext's overall<全面> authentication succeeded (the relevant REQUIRED, REQUISITE<需求>, SUFFICIENT<足夠> and OPTIONAL LoginModules succeeded), then the commit method for the LoginModule gets invoked. The commit method for a LoginModule checks its privately saved state to see if its own authentication succeeded. If the overall LoginContext authentication succeeded and the LoginModule's own authentication succeeded, then the commit method associates the relevant<相關> Principals (authenticated identities) and Credentials<憑證> (authentication data such as cryptographic keys) with the Subject located within the LoginModule.

          If the LoginContext's overall authentication failed (the relevant REQUIRED, REQUISITE, SUFFICIENT and OPTIONAL LoginModules did not succeed), then the abort(異常) method for each LoginModule gets invoked. In this case, the LoginModule removes/destroys any authentication state originally saved.

          Logging out a Subject involves only one phase. The LoginContext invokes the LoginModule's logout method. The logout method for the LoginModule then performs the logout procedures, such as removing Principals or Credentials from the Subject or logging session information.

          A LoginModule implementation must have a constructor with no arguments<無參數構造子>. This allows classes which load the LoginModule to instantiate it.

          posted on 2005-09-18 21:44 java世界暢談 閱讀(377) 評論(0)  編輯  收藏 所屬分類: JAVA
          主站蜘蛛池模板: 洛阳市| 龙泉市| 新密市| 太湖县| 白沙| 长沙县| 德保县| 海城市| 湟源县| 厦门市| 达拉特旗| 鹿泉市| 桂平市| 凤台县| 南郑县| 柳林县| 胶南市| 定安县| 拉萨市| 孟连| 涞源县| 通许县| 玉山县| 平陆县| 吕梁市| 瓮安县| 柘城县| 东城区| 当雄县| 五原县| 丰台区| 永福县| 合肥市| 交口县| 临沧市| 西藏| 桦甸市| 五莲县| 潼关县| 温泉县| 南和县|