From: Loren C. <lor...@gm...> - 2009-10-29 22:24:40
|
I am in the process of developing the authentication through OpenID for the eXist database. According to the document that I wrote at https://support.syntactica.com/groups/existsecurity/wiki/04f3c/Steps_to_implement_OpenID_in_eXist.html , I need to implement a new SecurityManager class. > A new Java class file will have to be written for maintaining the > user account files for OpenID. That file will > beorg.exist.security.OpenIDXMLSecurityManager.java for storing the > information in an XML resource (/db/system/OpenID/OpenID_users.xml) > and org.exist.security.OpenIDLDAPSecurityManager.java for storing > the information in LDAP. > I have also run across the fact that the org.exist.security.User class has the password as an attribute within it. I would like to propose the attached refactoring: What impact would this have on you and do you see any alternatives? Loren |