Hello, According to the JASSPIC spec version 1.1, chapter 4.5, The CallbackHandler should support CallerPrincipalCallback, GroupPrincipalCallback, PasswordValidationCallback, as well as CertStoreCallback, PrivateKeyCallback, SecretKeyCallback and TrustStoreCallback.
However, in Tomcat 8.5.* org.apache.catalina.authenticator.jaspic.CallbackHandlerImpl supports only CallerPrincipalCallback and GroupPrincipalCallback. Are there any plans to add support for the others? Regards, Lazar