Hello,

According to the JASSPIC spec version 1.1, chapter 4.5, The CallbackHandler
should support CallerPrincipalCallback, GroupPrincipalCallback,
PasswordValidationCallback, as well as CertStoreCallback,
PrivateKeyCallback, SecretKeyCallback and TrustStoreCallback.

However, in Tomcat 8.5.*
org.apache.catalina.authenticator.jaspic.CallbackHandlerImpl supports only
CallerPrincipalCallback and GroupPrincipalCallback. Are there any plans to
add support for the others?

Regards,
Lazar

Reply via email to