Developing a composite authentication handler
Extend the CompositeAuthenticationHandler class to combine the decisions from multiple authentication handlers.
If there are several, discrete authentication steps that must always be performed in the same order, packaging them as a composite authentication handler simplifies the server configuration.
This example describes how to use a composite authentication handler to call multiple local authentication handlers in sequence.
When the composite authentication handler is called, it calls the individual
authentication handlers that are passed to it as parameters in the order they are
passed in.
- If an individual handler responds with ALLOW or DENY, the composite handler responds with that decision to the server.
- If an individual handler responds with ABSTAIN, the composite handler calls the next individual handler in the list.
- If all individual handlers respond with ABSTAIN, the composite handler responds to the server with an ABSTAIN decision.