JAAS Library

This JAAS library provides an extendable framework to easily create JAAS modules with auditing and message queue support.

The following extension points are supported:

• Auditing
• Message queues
• Credential validators (i.e. the component that actually validates a provided credential)
• Authenticators (i.e. the component that performs the actual authentication, for instance, against a data store like a JDBC database)

Components and Usage

Common

Common configuration, plus interfaces and reference implementations for extension points such as audit and message queue integration.

Contents:

• Configuration management (reading common configuration properties from JAAS config files)
• Auditing interface and Factory
• Sample audit logger (this implementation of the audit interface logs audit events to the console log, and is not intended for production)
• Message queues interface and Factory
• Sample message queue logger (his implementation of the message queue interface logs messages to the console log, and is not intended for any real world use)

Documentation

• 1.0:
  • Maven Project Docs
  • Java Docs
• 2.0:
  • Maven Project Docs
  • Java Docs

Loginmodules

An aggregator project for the actual JAAS modules.

Currently, only one sub-project for username / password style credentials is included.

Documentation

• 2.0:
  • Maven Project Docs

Password

An aggregator project for the username / password style credentials JAAS modules.

This module contains submodules with various authenticators (i.e. modules that retrieve credential information from a data source) and validators (modules that can validate user provided credentials against credentials retrieved from a data source).

Documentation

• 2.0:
  • Maven Project Docs

Pwcommon

The actual JAAS modules for username / password based authentication, with support for white label domains, plus the necessary interface definitions to add custom validators (for additional password encodings) and authenticators (for additional data source).

• 2.0:
  • Maven Project Docs
  • Java Docs

Authenticators

An aggregator project for the username / password style credentials authenticators.

This module contains submodules with various authenticators (i.e. modules that retrieve credential information from a data source).

Documentation

• 2.0:
  • Maven Project Docs

Dummy Password Authenticator

This module contains a Dummy authenticator for username / password based authentication: This is meant as an example on how to implement an authenticator, and for testing. Validation in this module passes if the provided password matches the provided username. Not for use in production environments.

Documentation

• 2.0:
  • Maven Project Docs
  • Java Docs

JDBC Password Authenticator

This authenticator allows to perform username / password based authentication against databases, with support for white label domains. The database connection is made either through a configurable JDBC connection pool, or through a JNDI (pooled) connection.

Documentation

• 1.0:
  • Maven Project Docs
  • Java Docs
• 2.0:
  • Maven Project Docs
  • Java Docs

Validators

An aggregator project for the username / password style credentials validators.

This module contains submodules with various validators (i.e. modules that can validate user provided credentials against credentials retrieved from a data source).

Documentation

• 2.0:
  • Maven Project Docs

Plaintext Password Validator

This module contains a validator for username / password based credentials: This is meant as an example on how to implement a validator and for testing. Passwords are validated with a simple match against a plain text password received from an authenticator. Not for use in production environments.

Documentation

• 2.0:
  • Maven Project Docs
  • Java Docs

Useful Links

• Mike's Blog
• GitHub Issue Tracker
• Source on GitHub
• Configuration parameters
• Changelog
• How to contribute
• How to build from source

Authors and Contributors

• @mbeiter