What is the meaning of JAAS

Question

What is the point of JAAS if I have to write my own {any} LoginModule and everything else?

Answer 1

JAAS provides a level of abstraction between your application and the basic authentication mechanism. Thus, you can change the authentication mechanism used by your application without changing any code in your application.

Answer 2

Well, this is the beauty of it indeed.

We used JAAS in a large system of applications for mortgage loans, and although we used LoginModule based on properties, a large repayment bank used our own LoginModule based on an active directory, without the need to ever change the code.

Answer 3

As with any other standard, you get portability, smoothness and extensibility for free (or almost free).