As I understand JAAS on JBoss, it appears possible for a login module to obtain credentials by inquiring of the user via the callbacks when running as a client. This does not appear to be possible for a web application which seems to need to collect all credentials up front. Does anyone know of any plans to allow for web apps to interact more with the user or is this already allowed and I am missing something?
