OACC v2.0.0-alpha.4

Summary of changes in this release:

• pluggable authentication provider support
• redesigned authentication API calls to use credentials instead of passwords
• new extensible credentials interface to allow arbitrary authentication mechanisms
• built-in authentication provider now uses char[] instead of String for passwords

Summary of API (AccessControlContext) changes:

• authenticate method now takes a Credentials instance instead of a password
• new authenticate method to support authentication without providing credentials (for authentication provider that support it)
• renames setResourcePassword() to setCredentials()
• replaces createAuthenticatableResource() with overloaded createResource() methods

Includes a built-in AuthenticationProvider that provides password-based authentication, so that clients have the option to use OACC without having to implement their own authentication mechanism. Note that any passwords handled by the built-in authentication provider now use char[] exclusively, instead of String.

Bug fixes:

• fixes a bug that caused AccessControlContext instances to not be serializable

Corresponding oacc-db release:
The version of the oacc-db database configuration scripts to be used with this release can be found here.