Hi,
On Wed, Jan 16, 2013 at 9:18 AM, Markus Eisele <myfear_at_web.de> wrote:
> I was wondering, if there is any reason why JASPIC is only part of the
> Full Profile?
I was wondering about the same thing. It's not like this would have really
added any new functionality to web profile implementations. It's more about
doing things they are already doing, but via a standard API.
Kinda like EJB and the web profile, if JASPIC will be considered for the
Web Profile, a JASPIC-lite might be appropriate.
For starters, only the Servlet Container Profile and not the SOAP profile
should be included in the Java EE Web Profile. The LoginModule Bridge
Profile may also be appropriate.Tomcat for instance already uses something
quite close to that (
http://blog.frankel.ch/custom-loginmodule-in-tomcat).
Kind regards,
Arjan Tijms