I am new at JBoss and is wondering if there is a cache timeout for credentials cached by JBossCachedAuthenticationManager. I know this class as a "flush" method that flushes an entry from the cache but can't figure out where that is called. Also, since I am new to JBoss, some pointers on where should I start with the whole JBoss login modules would also be greatly appreciated.
Well, I guess I can now answer my own question!
Found that I can use indinispan as the cache and went with that. With Infinispan, you can set up expiry time and lifespan for cached entries. So that solves this problem. The default cache is just a bounded map with 1000 max entries.