LoginModule Lifecycle

• Initialize

• Login requires a two-phase process.

  • Authentication phase 1
    • gather user credential information from CallbackHandler
  • Authentication phase 2
    • commit changes if 1st phase is successful
    • Abort changes if 1st phase fails

• Logout

  • remove Principals and Credentials from Subject

Notes: