Hi Freeman, > Since Authentication is an interface, so your real message response > should have an object(let's say it's instance of AuthenticationImpl) > which implement Authentication, right?
well, sort of. What exact implementation of Authentication is used is determined during runtime (i.e. depends on the AuthenticationProvider used, where there are a few) and not really known by me. The Server side could always change the implementation. Anyway, the link is at least very helpful, thanks! Best regards, --- Jan.
