I use my own login module which extends CertRolesLoginModule and looks like this:
public class CustonCertLoginModule extends CertRolesLoginModule {
private String issuer;
private String defaultRole;
public void initialize(Subject subject, CallbackHandler callbackHandler, Map sharedState, Map options) {
super.initialize(subject, callbackHandler, sharedState, options);
issuer = (String) options.get("issuer");
defaultRole = (String) options.get("defaultRole");
}
protected Group[] getRoleSets() throws LoginException {
X509CertImpl credentials = (X509CertImpl) getCredentials();
if (issuer.equals(credentials.getIssuerDN().getName())) {
Group[] roleSets = {new SimpleGroup("Roles") {
{
addMember(new SimplePrincipal(defaultRole));
}
}};
return roleSets;
}
return null;
}
It seems to work fine, but sometimes (which is about one or two times in one minute) when I try to access restricted page it seems to work really slow (more than one minute of waiting to load requested page).
I could't find any pattern in this strange behaviour of authorizing module, so I'm lost.
Is there anything bad wity my custom class?
