Java Security

  1. Authentication and Authorization
    1. JAAS Architecture
      1. Authentication Framework
        1. Pluggable Authentication
          1. Subject-Based Security
            1. Credential Management
            2. Core Components
              1. Subject Class
                1. Principal Interface
                  1. Credential Management
                  2. Authentication Process
                    1. Login Context
                      1. Login Modules
                        1. Callback Handlers
                          1. Authentication States
                        2. Subject and Principal Management
                          1. Subject Identity
                            1. Principal Association
                              1. Credential Storage
                                1. Subject Delegation
                                2. Principal Types
                                  1. User Principals
                                    1. Group Principals
                                      1. Role Principals
                                      2. Credential Types
                                        1. Public Credentials
                                          1. Private Credentials
                                            1. Credential Lifecycle
                                          2. Login Modules
                                            1. Login Module Interface
                                              1. Authentication Phases
                                                1. Module Configuration
                                                  1. Module Chaining
                                                  2. Standard Login Modules
                                                    1. Krb5LoginModule
                                                      1. JndiLoginModule
                                                        1. KeyStoreLoginModule
                                                        2. Custom Login Modules
                                                          1. Implementation Guidelines
                                                            1. Configuration Options
                                                              1. Error Handling
                                                            2. JAAS Configuration
                                                              1. Configuration Files
                                                                1. File Format
                                                                  1. Module Specifications
                                                                    1. Configuration Options
                                                                    2. Programmatic Configuration
                                                                      1. Configuration Providers
                                                                        1. Dynamic Configuration
                                                                        2. Authentication Policies
                                                                          1. Required Modules
                                                                            1. Optional Modules
                                                                              1. Sufficient Modules
                                                                            2. Authorization Integration
                                                                              1. Principal-Based Authorization
                                                                                1. Permission Mapping
                                                                                  1. Access Control Decisions

                                                                                Previous

                                                                                6. Secure Communication

                                                                                Go to top

                                                                                Next

                                                                                8. Secure Coding Practices