On Jul 2, 2007, at 1:59 PM, David Blevins wrote:
On Jul 2, 2007, at 10:22 AM, David Blevins wrote:
Still reading the JASPI docs, haven't gotten to the bulk of your
email yet. One think that pricked my ears when reading the JSR page:
"The J2EE programming model does not define standard APIs that may
be used to cause container visible user accounts to be created
from the portable component programming model."
I've been complaining about that one for years! "J2EE apps are
portable! Oh? Wait. You want to write an app where people can
sign up online then log in and use your app?? No, you definitely
can't do that in a portable way... good thing people never write
online apps like that."
Can't wait to see what the spec does to fix this.
To answer my own question... looks like nothing. It was in the
JSRs "optional" section and doesn't seem to be mentioned in the spec.
We could write something, but it would be back-end specific. jaspi
doesn't necessarily use JAAS or login modules etc, so a jaspi
provider can definitely be store specific and include extra
functionality like this. Or maybe we could use the jpam stuff?
thanks
david jencks
Oh well :|
-David
