将公共对象请求代理体系结构程序化登录迁移到 Java 认证和授权服务 (CORBA 和 JAAS)

使用本主题作为如何使用基于 CORBA 的程序化登录 API 执行程序化登录的示例。

1. 使用以下示例说明如何使用基于 CORBA 的程序化登录 API 执行程序化登录:
   基于 CORBA 的程序化登录 API 由 JAAS 登录替换。

   注: 以下示例中使用的 LoginHelper 应用程序编程接口 (API) 在 WebSphere Application Server V 9.0 中已不推荐使用，并且将在将来的发行版中除去。 建议使用下一个步骤中显示的 JAAS 程序化登录 API。

   public class TestClient {
   ...
   private void performLogin() {
   // Get the ID and password of the user.
   String userid = customGetUserid();
   String password = customGetPassword();
   
   // Create a new security context to hold authentication data.
   LoginHelper loginHelper = new LoginHelper();
   try {
   // Provide the ID and password of the user for authentication.
   org.omg.SecurityLevel2.Credentials credentials = 
   loginHelper.login(userid, password);
   
   // Use the new credentials for all future invocations.
   loginHelper.setInvocationCredentials(credentials);
   // Retrieve the name of the user from the credentials
   // so we can tell the user that login succeeded.
   
   String username = loginHelper.getUserName(credentials);
   System.out.println("Security context set for user: "+username);
   } catch (org.omg.SecurityLevel2.LoginFailed e) {
   // Handle the LoginFailed exception.
   }
   }
   ...
   }

2. 使用以下示例将基于 CORBA 的程序化登录 API 迁移到 JAAS 程序化登录 API。

   以下示例假定已为应用程序代码授予必需的 Java 2 安全许可权。 有关更多信息，请参阅 配置 Java 认证和授权服务的程序化登录， 保护用于开发应用程序的系统资源和 API (Java 2 安全性)以及位于 http://www.ibm.com/developerworks/java/jdk/security/的 JAAS 文档。

   public class TestClient {
   ...
   private void performLogin() {
   // Create a new JAAS LoginContext.
   javax.security.auth.login.LoginContext lc = null;
   
   try {
   // Use GUI prompt to gather the BasicAuth data.
   lc = new javax.security.auth.login.LoginContext("WSLogin",
   new com.ibm.websphere.security.auth.callback.WSGUICallbackHandlerImpl());
   
   // create a LoginContext and specify a CallbackHandler implementation
   // CallbackHandler implementation determine how authentication data is collected
   // in this case, the authentication date is collected by  login prompt
   //   and pass to the authentication mechanism implemented by the LoginModule.
   } catch (javax.security.auth.login.LoginException e) {
   System.err.println("ERROR: failed to instantiate a LoginContext and the exception: " 
   + e.getMessage());
   e.printStackTrace();
   
   // may be javax.security.auth.AuthPermission "createLoginContext" is not granted
   //   to the application, or the JAAS Login Configuration is not defined.
   }
   
   if (lc != null)
   try {
   lc.login();  // perform login
   javax.security.auth.Subject s = lc.getSubject();
   // get the authenticated subject
   
   // Invoke a J2EE resources using the authenticated subject
   com.ibm.websphere.security.auth.WSSubject.doAs(s,
   new java.security.PrivilegedAction() {
   public Object run() {
   try {
   bankAccount.deposit(100.00);  // where bankAccount is an protected EJB
   } catch (Exception e) {
   System.out.println("ERROR: error while accessing EJB resource, exception: " 
   + e.getMessage());
   e.printStackTrace();
   }
   return null;
   }
   }
   );
   
   // Retrieve the name of the principal from the Subject
   // so we can tell the user that login succeeded,
   // should only be one WSPrincipal.
   java.util.Set ps = 
   s.getPrincipals(com.ibm.websphere.security.auth.WSPrincipal.class);
   java.util.Iterator it = ps.iterator();
   while (it.hasNext()) {
   com.ibm.websphere.security.auth.WSPrincipal p =
   (com.ibm.websphere.security.auth.WSPrincipal) it.next();
   System.out.println("Principal: " + p.getName());
   }
   } catch (javax.security.auth.login.LoginException e) {
   System.err.println("ERROR: login failed with exception: " + e.getMessage());
   e.printStackTrace();
   
   // login failed, might want to provide relogin logic
   }
   }
   ...
   }