Interface IdentityStoreHandler
- 
 public interface IdentityStoreHandlerIdentityStoreHandleris a mechanism for validating a caller's credentials, and accessing a caller's identity attributes, by consulting a set of one or moreIdentityStores.It is intended for use by an authentication mechanism, such as an HttpAuthenticationMechanism(Jakarta Security) or aServerAuthModule(Jakarta Authentication).Beans should inject only this handler, and not IdentityStoredirectly, as multiple stores may exist.Implementations of Jakarta Security must supply a default implementation of IdentityStoreHandlerthat behaves as described in the Jakarta Security specification document. Applications do not need to supply anIdentityStoreHandlerunless application-specific behavior is desired.
- 
- 
Method SummaryAll Methods Instance Methods Abstract Methods Modifier and Type Method Description CredentialValidationResultvalidate(Credential credential)Validate the givenCredentialand return the identity and attributes of the caller it represents.
 
- 
- 
- 
Method Detail- 
validateCredentialValidationResult validate(Credential credential) Validate the givenCredentialand return the identity and attributes of the caller it represents.Implementations of this method will typically invoke the validate()andgetCallerGroups()methods of one or moreIdentityStores and return an aggregated result.Note that the IdentityStoremay check forIdentityStorePermissionifgetCallerGroups()is called and aSecurityManageris configured. (The default built-in stores do perform this check; application-supplied stores may or may not.) An implementation of this method should therefore invokegetCallerGroups()in the context of aPrivilegedAction, and arrange to be granted the appropriateIdentityStorePermissionpermission.- Parameters:
- credential- The credential to validate.
- Returns:
- The validation result.
 
 
- 
 
-