Package es.rediris.papi.jaas

PAPIJAAS is a PAPI PoA able to be integrated with the Java Authentication and Authorization Service (JAAS).

See:
Description

Class Summary

CookieCallbackHandler
PAPIHcookCallback
PAPILcookCallback
PAPILoginModule
PAPIPrincipal
RequestCallback
RequestCallbackHandler
ResponseCallback

Package es.rediris.papi.jaas Description

PAPIJAAS is a PAPI PoA able to be integrated with the Java Authentication and Authorization Service (JAAS).

JAAS allows for the integration of AA systems within any Java-based environment, using a PAM (Pluggable Authentication Module) framework. With PAPIJAAS, any Java application able to use JAAS for authentication can take advantage of the PAPI framework.

This package has dependencies on the following java libraries:

1. log4j (>= 1.2.13)
2. servlet-api (>=2.4)
3. Bouncy Castle cryptographic provider (bcprov, >=133)

To generate the proper cryptographic keys, you may use OpenSSL.

PAPIJAAS has been developed and tested using JDK 1.5.

To add JAAS based authentication on your application, you should add the following code (note that HTTP request and response must be available in order to pass them to PAPI):

 RequestCallbackHandler rch = null;
 rch = new RequestCallbackHandler(request,response);
 
 lc = new LoginContext("PapiJaas", rch);
 lc.login();

After lc.login(), if authentication is valid, the LoginContext will have all the information about the subject and principals that may be required by the application.

PAPIJAAS is configured through a properties file

For further information on configuration and usage of PAPIJAAS, refer to the PAPI document set, or contact the PAPI Development Team