在jaas中我们可以使用javax.security.auth.login.Configuration类的对象作为使用.config文件的LoginModule配置的替代方法

Question

While performing JAAS authentication I do not want to use a .config file for LoginModule lookup/configuration. My question is; is there a way to do this with out using a .config file? or can we use javax.security.auth.login.Configuration object for this purpose because it not clear to me after reading Oracle javadoc http://docs.oracle.com/javase/8/docs/api/javax/security/auth/login/Configuration.html

Answer 1

Pass your Configuration at constructor of LoginContext .

See JavaDoc at LoginContext :

[...]

2. Configuration

   If the constructor has a Configuration input parameter and the caller specifies a non-null Configuration, the LoginContext uses the caller-specified Configuration.

[...]

public LoginContext(String name,
                    Subject subject,
                    CallbackHandler callbackHandler,
                    Configuration config)
             throws LoginException