SecurityContext API
E836337
The SecurityContext API is a Jakarta Security component that provides programmatic access to authentication and authorization information for the currently executing user within a Jakarta EE application.
Statements (43)
| Predicate | Object |
|---|---|
| instanceOf |
Jakarta Security API component
ⓘ
programmatic security API ⓘ |
| abstracts | container-specific security details ⓘ |
| allows |
accessing security context information independent of underlying container
ⓘ
checking if a caller is in a given role ⓘ retrieving the current caller principal ⓘ triggering authentication mechanisms ⓘ |
| belongsToSpecification | Jakarta Security specification NERFINISHED ⓘ |
| category |
application security
ⓘ
enterprise Java security ⓘ |
| conformsTo | Jakarta Security specification versions starting from Jakarta EE 8 era ⓘ |
| designedFor |
Jakarta RESTful Web Services resources
NERFINISHED
ⓘ
enterprise beans ⓘ server-side components ⓘ servlets ⓘ |
| exposes |
methods to check caller roles
ⓘ
methods to obtain caller principal ⓘ methods to perform authentication ⓘ methods to query authentication status ⓘ |
| goal |
provide a consistent security API across Jakarta EE technologies
ⓘ
simplify programmatic security in Jakarta EE ⓘ |
| integratesWith |
Jakarta Authentication
NERFINISHED
ⓘ
Jakarta Authorization NERFINISHED ⓘ Jakarta RESTful Web Services NERFINISHED ⓘ Servlet containers ⓘ |
| introducedInContextOf | modernization of Java EE security under Jakarta EE ⓘ |
| partOf |
Jakarta EE
NERFINISHED
ⓘ
Jakarta Security NERFINISHED ⓘ |
| provides |
programmatic access to authentication information
ⓘ
programmatic access to authorization information ⓘ |
| relatedTo |
HttpAuthenticationMechanism API
NERFINISHED
ⓘ
IdentityStore API NERFINISHED ⓘ |
| replaced | some programmatic security use cases from Java EE security APIs ⓘ |
| scope | currently executing user ⓘ |
| standardizedBy | Eclipse Foundation Jakarta EE Working Group NERFINISHED ⓘ |
| supports |
container-managed security integration
ⓘ
identity store–based authentication ⓘ role-based access control ⓘ |
| targetAudience | Jakarta EE application developers ⓘ |
| usedFor |
custom authentication flows
ⓘ
fine-grained access control decisions in code ⓘ integration with external identity providers ⓘ |
| usedIn | Jakarta EE applications ⓘ |
Referenced by (1)
Full triples — surface form annotated when it differs from this entity's canonical label.