Package org.jbpm.identity.security

adapts the identity model data to JAAS with an implementation of a LoginModule and a Policy.

See:
          Description

Interface Summary
IdentityService decouples the IdentityLoginModule from the underlying medium that stores the users, groups, memberships and permissions.
 

Class Summary
AuthenticatedUser  
IdentityLoginModule jaas login module that, in case of successfull verification, adds the User as a principal to the subject.
IdentityPolicy a java.security.Policy implementation that in combination with the IdentityLoginModule enforces the secirity permissions modelled as in the package org.jbpm.identity.
Password the password as a private credential of a Subject.
Username the username as a public credential of a Subject.
 

Package org.jbpm.identity.security Description

adapts the identity model data to JAAS with an implementation of a LoginModule and a Policy. The login module validates the user/password combination and associates a User (=Principal) with the Subject. The policy uses the Permissions that are specified in the identity data (accessed by an IdentitySession) to validate access.