We currently using a custom realm based on a custom JAAS security domain based on a custom JAAS login module in WildFly 10.1. The custom login module is based on the PicketBox DatabaseServerLoginModule. We use a subclass because we have to perform additional checks and block the user after too many logins.
Looking at the upcoming changes in WildFly 11 with Elytron we would like to know:
In the short term will this setup continue to work on WildFly 11.
In the medium term what is the recommendation on implementing a custom realm or identity store based on the jdbc-realm?