Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.
Excerpt

Tutorial that provides a brief introduction to Jass security set up, based on a dual module approach.

Table of Contents

Jaas security set up

Magnolia CMS uses Sun's Java SE Security (JAAS). JAAS creates two distinct processes for:

...

Each of these classes extends

Javadoc
info.magnolia.jaas.sp.AbstractLoginModule
info.magnolia.jaas.sp.AbstractLoginModule
. You can use this framework to implement your own login logic.

Login Procedure

The following (simplified) login procedure assumes you have two JAAS modules configured:


...

The commit() method includes the values from both authentication and authorization. The authentication module provides all user properties, while the authorization module adds the roles and groups and the respective ACLs to the user object.

Example

Creating a new user class implementing

Javadoc
info.magnolia.cms.security.User
info.magnolia.cms.security.User
:

...