This rather untyped, low-level and user-unfriendly {@link CallbackHandler} object controls many details of the securityprocessing at runtime, such as locating {@link CertStore} or {@link KeyStore}. While we'd like to provide a higher level features for common configurations, this feature works as an catch-all escape hatch.
See {@link com.sun.xml.wss.impl.misc.DefaultCallbackHandler#handle(javax.security.auth.callback.Callback[])}implementation as an example of what callback {@link CallbackHandler} receives (note that this defaultimplementation class itself is not a committed part of Metro.)
This feature allows you to pass in an instance of {@link CallbackHandler} unlike{@code
|
|
|
|