jaas getCredentials()

[block....@googlemail.com]

Hello everybody,

I've read the jaas authentication and authorization tutorials. What's
still not clear to me is "who" is responsible for storing credentials
in the subject? Unfortunately I have not found anything explaining
that.

Another point: The sample Authorizion file (SampleAzn.java) does a
login everytime the authorized action takes place. Is that really
needed? I mean, if the user once hat authenticated, it should be
sufficient, shouldn't it?

Best Regards,

Oliver Block

[block....@googlemail.com]

On 25 Jun., 16:49, "block.oli...@googlemail.com"

<block.oli...@googlemail.com> wrote:
> Hello everybody,
>
> I've read the jaas authentication and authorization tutorials. What's
> still not clear to me is "who" is responsible for storing credentials
> in the subject? Unfortunately I have not found anything explaining
> that.

I've found a paragraph which suggests that this is done by the login
module in commit(), just as associating the Principals with the
subject.