
Developing Middleware in Java EE 8
By :

As mentioned earlier, an identity store is an object that provides access to user's information. An identity store itself is an abstract concept, and there exists many different types of built-in implementations to this abstract concept. And, moreover, you can even define your own custom identity store objects.
In the following sections, we're going to take a closer look at the following types of identity stores:
As shown earlier, a database identity store is used to retrieve user information from a relation database. We've used @DatabaseIdentityStoreDefintion
in the first example of this chapter, and here we're going to explore more attributes to this annotation, as shown in this example:
@WebServlet("/home") @ServletSecurity(@HttpConstraint(rolesAllowed = "user")) @DatabaseIdentityStoreDefinition( dataSourceLookup = "jdbc/secDS", callerQuery = "select password from users...