[jaspic-dev] Proposal for EE4J compatible implementation of Jakarta Auth

[arjan tijms <arjan.tijms@xxxxxxxxx>]

Hi,

At the moment we don't have an EE4J compatible implementation for Jakarta Authentication (previously JASPIC).

On the one hand as JASPIC directs how containers should integrate with an authentication module you can't really have a fully standalone implementation. On the other hand, there's quite a bit of functionality that actually can be implemented.

Ron Monzillo started with exactly this years ago; the Jaspic Provider Framework; https://mvnrepository.com/artifact/org.glassfish.security/jaspic.provider.framework/3.2-b06

It's currently inside the GlassFish code base, but has no GlassFish dependencies. See https://github.com/eclipse-ee4j/glassfish/tree/master/appserver/security/jaspic-provider-framework

I'd like to propose removing this module from GlassFish, moving it to it's own project under https://github.com/eclipse-ee4j and evolve it from there.

Thoughts?

Kind regards,

Arjan