OACC Framework v2.0.0-alpha.4 Release Notes

Release Date: 2015-01-10 // over 9 years ago
  • 🚀 Summary of changes in this release:

    • 🔌 pluggable authentication provider support
    • redesigned authentication API calls to use credentials instead of passwords
    • 🆕 new extensible credentials interface to allow arbitrary authentication mechanisms
    • built-in authentication provider now uses char[] instead of String for passwords

    Summary of API (AccessControlContext) changes:

    • authenticate method now takes a Credentials instance instead of a password
    • 🆕 new authenticate method to support authentication without providing credentials (for authentication provider that support it)
    • 📇 renames setResourcePassword() to setCredentials()
    • replaces createAuthenticatableResource() with overloaded createResource() methods

    Includes a built-in AuthenticationProvider that provides password-based authentication, so that clients have the option to use OACC without having to implement their own authentication mechanism. Note that any passwords handled by the built-in authentication provider now use char[] exclusively, instead of String.

    🐛 Bug fixes:

    • 🛠 fixes a bug that caused AccessControlContext instances to not be serializable

    🚀 Corresponding oacc-db release:
    🚀 The version of the oacc-db database configuration scripts to be used with this release can be found here.