Package History and Design

The JAAS package was introduced as an optional package in Java 1.2 and 1.3 versions; it is now part of the core set of APIs for the Java 1.4 version. JAAS is tightly integrated with the Java security classes, interacting with the active SecurityManager and AccessController class instances when needed.

Before JAAS was available, Java security only allowed code to be executed based on where the code had originated. With JAAS, applications can now examine who is running the application and make security decisions based on that information.

JAAS is designed to be modular and pluggable, meaning that certain portions can be swapped with other similar modules as needed. These pluggable components could be developed as part ...

Get J2EE™ and Beyond: Design, Develop, and Deploy World-Class Java™ Software now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.