[Springframework-developer] Security SPI for Spring

[Double D. <dou...@ya...>]

Java has done a good job creating a pluggable JNDI
SPI:
http://java.sun.com/products/jndi/serviceproviders.html


But, Java does not have a pluggable Security SPI.
(JAAS is not it).

So, various J2EE vendors (see links below) have gone
on to create their own Security SPI.

However, none of the opensource Java frameworks
include a Security SPI.

I am hoping that Spring will provide a pluggable
Security SPI:
--  Authentication:  Pluggable providers for SAML,
WS-Security,  ProjectLiberty, etc.
--  Access Control:  Pluggable providers for XACML,
RBAC (Roles Based Access Control)

For the benefit of all Spring users, how would one go
about creating this?  Any Spring+security experts who
can lead this effort?

Cheers,
--  DD


WebLogic has the most comprehensive Security SPI:
http://e-docs.bea.com/wls/docs81/javadocs/weblogic/security/spi/package-summary.html

Borland Security SPI (J2EE and CORBA):
http://info.borland.com/techpubs/bes/dusecurityapijava.html


__________________________________
Do you Yahoo!?
Yahoo! Hotjobs: Enter the "Signing Bonus" Sweepstakes
http://hotjobs.sweepstakes.yahoo.com/signingbonus