Summary
We began this chapter discussing the basic concepts of security and the difference between authentication and authorization.
Authentication is used to verify the identity of a user, while authorization is used to check if the user has the rights to access a particular resource.
WildFly uses the PicketBox framework. PicketBox sits at the top of the Java Authentication and Authorization Service (JAAS) and secures all the Java EE technologies running in the application. The core section of the security subsystem is contained in the security-domain element, which performs all the required authorization and authentication checks.
We then took a look at some of the login modules used to check user credentials against different datastores. Each ...
Get WildFly Configuration, Deployment, and Administration - Second Edition now with the O’Reilly learning platform.
O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.
