[SM-812] [patch] JAAS Login for Batch Processes

• Type: New Feature
• Status: Closed
• Priority: Major
• Resolution: Won't Fix
• Component/s: servicemix-components
• Patch Info: Patch Available
• Assignee: Unassigned
• Reporter: Kristian Kohler
• Created: 11/Jan/07 08:42
• Updated: 26/Mar/13 13:36
• Resolved: 26/Mar/13 13:36

Description

Hi

the attached patch includes a PassThroughJAASLoginComponent which forwards a
Message through the NMR and performs a JAAS login. The JAAS Subject is added to
the message properties ("javax.jbi.security.subject").

This component can be used if you have a batch process which should call an JAAS
secured component (for example a EJB service called with JSR-181). The
attached StaticValueCallbackHandler for example enables you to configure static
login information.

Sample Config:

— 8< (start) —

...
<sm:activationSpec componentName="login" service="foo:login">
<sm:component>
<bean class="org.apache.servicemix.components.security.PassThroughJAASLoginComponent">
<property name="loginContext" ref="loginContext" />
</bean>
</sm:component>
</sm:activationSpec>
...

<bean id="loginContext"
class="javax.security.auth.login.LoginContext">
<constructor-arg>
<value>servicemix-domain</value>
</constructor-arg>
<constructor-arg>
<ref local="callbackHandler" />
</constructor-arg>
</bean>

<bean id="callbackHandler"
class="org.apache.servicemix.components.security.StaticValueCallbackHandler">
<property name="name" value="first" />
<property name="password" value="secret" />
</bean>
...

— 8< (end) —

After the PassThroughJAASLoginComponent is invoked and the login could be
performed you can call JAAS secured endpoints.

The patch includes test cases for the component.

Kristian