Summary

JAAS allows you to authenticate users and grant them specific permissions based on their identities. Like the rest of the Java security model, it is designed to be very flexible by providing configuration files that determine at runtime how the authentication is performed and which authorizations a particular user should be granted. This moves much of the burden of these tasks from the developer to the system administrator, and it allows policies to be changed at will.

Get Java Security, 2nd Edition now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.