"Steve Ebersole" wrote in message
news:3f9532fa$1@newsgroups.bea.com...
>
> Readin through the WL Server 8.1 docs on security, there is a section
which talks
> about "Using the Programmatic Authentication API" in web apps, as opposed
to posting
> to j_security_check. That section talks about two built-in
CallbackHandler impls
> named SimpleCallbackHandler and URLCallbackHandler. What is the purpose
of the
> URLCallbackHandler? Specifically, what is the URL passed into the
constrauctor
> supposed to represent?
>
The URLcallbackhandler is used primarily for fat clients that are using jaas
to login
into the server. The url is that of the server.