soteria
soteria copied to clipboard
Soteria, a Jakarta Security implementation
Is it possible to use multi factor authentication? I mean I want to use form-based authentication and OTP, such as Google authenticator or similar app. If yes, are there any...
The implementation of LdapIdentityStore silently assumes that members of a group are always specified with their distinguished name. This assumption works well for Active Directory and several other common LDAP...
Currently expressions are detected just by the use of `AnnotationELProcessor#hasAnyELExpression()`. But that method only checks wether the value of any attribute seems to be a valid EL expression. That may...
WildFly 14 is Java EE 8 certified. We need to disable its bundled Soteria module in order to to test ours.
https://issues.jboss.org/browse/WFLY-11265 [snip] The org.glassfish.soteria:parent:1.0 pom has this unfortunate business: -- ... 01 1.1-b01-SNAPSHOT ${spec_impl_version} ... release 01 1.0 So when they build their stuff using the 'release' profile they depend...
The SubjectParser contains package names for different servers within Strings. This leads to some unmaintainable code. Proposal (see also https://github.com/javaee-security-spec/soteria/issues/69#issuecomment-308394262) is to create separate maven artifacts with the application server...
I am trying to implement the loginbacking according to the App-mem-custom-form and when I run: ``` @Inject SecurityContext securityContext; FacesContext context = FacesContext.getCurrentInstance(); Credential credential = new UsernamePasswordCredential(username, new Password(password));...
As JSR 375 was supposed to cross the JEE spec, I see no mention anywhere of WebSocket support. One of the pain points of using JSR 356 is performing security...
The soteria pom.xml file (and/or child poms) have several problems: - The when deploying soteria, all test artifacts are pushed to the repository along with the jarfile, sources, and javadoc...
As reported by @wxwesther via email: In order to test `IdentityStorePermission` related requirements, I enabled `SecurityManager` in Glassfish. And `IdentityStorePermission` works as expected. But unfortunately, there are several HAM and...