Implement a delegating LoginModule
Opened this issue · 0 comments
hzbarcea commented
There is already a TokenLoginModule, but that is configured to use local files for storing public keys. Another option is to use a remote service, either via an API (http) or, even better, using a JMS queue to a remote service/consumer.
The Login module should be configured with the public key(s) of the remote service and the remote service should sign the response for enhanced security.