Knowledge base: Java Authentication and Authorization Service (JAAS)

JAAS is an API that enables Java applications to access authentication and access control services without being tied to those services.

Typically an application creates JAAS LoginContext, tell to use Login Module which is associated with given entry name and put the callback handler which could be used by LoginModule to retrieve other information e.g. from user like 'user name', 'password', 'confirmation'.

JAAS specification, documentation etc at http://java.sun.com/products/jaas/

JAAS authentication tutorial provided at http://java.sun.com/j2se/1.4.2/docs/guide/security/jgss/tutorials/AcnOnly.html#AcnFullCode

JAAS authorization tutorial provided at http://java.sun.com/j2se/1.4.2/docs/guide/security/jgss/tutorials/AcnAndAzn.html