loading table of contents...

5.2.2.2. Authentication Process

CoreMedia's solution for this is a UserService which is triggered by the authentication forms. The interface UserService describes operations for authentication and for changing the password. Part of the delivery is a concrete UserService UserServiceImpl which tries the authentication operation against the third-party commerce system. For IBM WebSphere the WcsUserServiceImpl is an implementation of the interface CommerceUserService. An instance for this is provided as a Spring bean with the id liveContextUserService.

The authentication is realized through a Spring security manager that is configured in file livecontext-cae-spring-security.xml. The Spring security configuration of CoreMedia DXP 8 provides an AuthenticationProvider that is implemented in the class LiveContextUserAuthenticationProvider. The provider looks up the Elastic Social user for a given user name or email address. If the user exists, the credentials are checked using login method of the CommerceUserService.