Skip to content

Commit

Permalink
Merge pull request #175 from jeanouii/jakarta-security-2.0
Browse files Browse the repository at this point in the history
Add spec.version property so we can easily rename it.
  • Loading branch information
arjantijms authored Sep 2, 2020
2 parents e0f3c5d + 409ef08 commit d223ac1
Show file tree
Hide file tree
Showing 5 changed files with 12 additions and 8 deletions.
2 changes: 1 addition & 1 deletion api/pom.xml
Original file line number Diff line number Diff line change
Expand Up @@ -29,7 +29,7 @@

<groupId>jakarta.security.enterprise</groupId>
<artifactId>jakarta.security.enterprise-api</artifactId>
<version>2.0.0-SNAPSHOT</version>
<version>2.0.0</version>
<packaging>bundle</packaging>

<name>Jakarta Security</name>
Expand Down
2 changes: 1 addition & 1 deletion pom.xml
Original file line number Diff line number Diff line change
Expand Up @@ -29,7 +29,7 @@

<groupId>org.eclipse.ee4j.security.enterprise-api</groupId>
<artifactId>security.enterprise-api-parent</artifactId>
<version>2.0.0-SNAPSHOT</version>
<version>2.0.0</version>
<packaging>pom</packaging>

<name>Jakarta Security Parent</name>
Expand Down
12 changes: 8 additions & 4 deletions spec/pom.xml
Original file line number Diff line number Diff line change
Expand Up @@ -22,7 +22,7 @@
<parent>
<groupId>org.eclipse.ee4j.security.enterprise-api</groupId>
<artifactId>security.enterprise-api-parent</artifactId>
<version>2.0.0-SNAPSHOT</version>
<version>2.0.0</version>
</parent>

<artifactId>security-spec</artifactId>
Expand All @@ -40,6 +40,10 @@
<status>DRAFT</status>
<maven.build.timestamp.format>MMMM dd, yyyy</maven.build.timestamp.format>
<revisiondate>${maven.build.timestamp}</revisiondate>

<!-- default is the same for backward compatibility reason
Easy to override when building with a system property -->
<spec.version>${project.version}</spec.version>
</properties>

<build>
Expand Down Expand Up @@ -75,7 +79,7 @@
</goals>
<configuration>
<backend>html5</backend>
<outputFile>${project.build.directory}/generated-docs/security-spec-${project.version}.html</outputFile>
<outputFile>${project.build.directory}/generated-docs/security-spec-${spec.version}.html</outputFile>
<attributes>
<doctype>book</doctype>
<status>${status}</status>
Expand All @@ -98,7 +102,7 @@
</goals>
<configuration>
<backend>pdf</backend>
<outputFile>${project.build.directory}/generated-docs/security-spec-${project.version}.pdf</outputFile>
<outputFile>${project.build.directory}/generated-docs/security-spec-${spec.version}.pdf</outputFile>
<attributes>
<pdf-stylesdir>${project.basedir}/src/main/theme</pdf-stylesdir>
<pdf-style>jakartaee</pdf-style>
Expand All @@ -122,7 +126,7 @@
<sourceDocumentName>security-spec.adoc</sourceDocumentName>
<sourceHighlighter>coderay</sourceHighlighter>
<attributes>
<revnumber>${project.version}</revnumber>
<revnumber>${spec.version}</revnumber>
<revremark>${status}</revremark>
<revdate>${revisiondate}</revdate>
</attributes>
Expand Down
2 changes: 1 addition & 1 deletion spec/src/main/asciidoc/authenticationMechanism.adoc
Original file line number Diff line number Diff line change
Expand Up @@ -69,7 +69,7 @@ See javadoc for a detailed description of _HttpMessageContext_ and _HttpMessageC

=== Installation and Configuration

An _HttpAuthenticationMechanism_ must be a CDI bean, and is therefore visible to the container through CDI if it is packaged in a bean archive, which generally includes Jakarta EE modules and application archives, as well as other archives and classes that are not part of an application, but are required by the Java EE specification to be visible to applications. See the CDI specification for details on bean archives and bean discovery. An _HttpAuthenticationMechanism_ is assumed to be normal scoped.
An _HttpAuthenticationMechanism_ must be a CDI bean, and is therefore visible to the container through CDI if it is packaged in a bean archive, which generally includes Jakarta EE modules and application archives, as well as other archives and classes that are not part of an application, but are required by the Jakarta EE specification to be visible to applications. See the CDI specification for details on bean archives and bean discovery. An _HttpAuthenticationMechanism_ is assumed to be normal scoped.

It MUST be possible for the definition of an _HttpAuthenticationMechanism_ to exist within the application archive. Alternatively such definition MAY also exists outside the application archive, for example in a jar added to the classpath of an application server.

Expand Down
2 changes: 1 addition & 1 deletion spec/src/main/asciidoc/identityStore.adoc
Original file line number Diff line number Diff line change
Expand Up @@ -8,7 +8,7 @@ This chapter describes the _IdentityStore_ and _IdentityStoreHandler_ interfaces

_IdentityStore_ provides an abstraction of an identity store, which is a database or directory (store) of identity information about a population of users that includes an application's callers. An identity store holds caller names, group membership information, and information sufficient to allow it to validate a caller's credentials. An identity store may also contain other information, such as globally unique caller identifiers (if different from caller name), or other caller attributes.

Implementations of the _IdentityStore_ interface are used to interact with identity stores to authenticate users (i.e., validate their credentials), and to retrieve caller groups. _IdentityStore_ is roughly analogous to the JAAS _LoginModule_ interface, which is often integrated into Jakarta EE products (albeit in vendor-specific ways). Unlike _LoginModule_, _IdentityStore_ is intended specifically for Java EE, and provides only credential validation and group retrieval functions (i.e., functions that require interaction with an identity store). An _IdentityStore_ does not collect caller credentials, or manipulate __Subject__s.
Implementations of the _IdentityStore_ interface are used to interact with identity stores to authenticate users (i.e., validate their credentials), and to retrieve caller groups. _IdentityStore_ is roughly analogous to the JAAS _LoginModule_ interface, which is often integrated into Jakarta EE products (albeit in vendor-specific ways). Unlike _LoginModule_, _IdentityStore_ is intended specifically for Jakarta EE, and provides only credential validation and group retrieval functions (i.e., functions that require interaction with an identity store). An _IdentityStore_ does not collect caller credentials, or manipulate __Subject__s.

_IdentityStore_ is intended primarily for use by _HttpAuthenticationMechanism_ implementations, but could in theory be used by other types of authentication mechanisms (e.g., a Jakarta Authentication _ServerAuthModule_, or a container's built-in authentication mechanisms). _HttpAuthenticationMechanism_ implementations are not required to use _IdentityStore_ -- they can authenticate users in any manner they choose -- but _IdentityStore_ will often be a useful and convenient mechanism.

Expand Down

0 comments on commit d223ac1

Please sign in to comment.