views:

322

answers:

3

What's the point of JAAS if I have to write my own {whatever}LoginModule and everything else?

+4  A: 

Well that is the beauty of it really..

We used JAAS in a big mortgage application system, and while we used a LoginModule based on properties, the big mortage bank used an own implemented LoginModule based on active directory, without we ever having to change something in code.

Arcturus
+7  A: 

JAAS provides an abstraction layer between your application and the underlying authentication mechanism. Therefore, you could change the authentication mechanism used by your application without having to change any of your application code.

Mark
+2  A: 

Just like with any other standard you get portability, plugability, and extensibility for free (or almost for free).

grigory