I want to provide additional fields in my Web application for form-based authentication. What application programming interfaces (APIs) should I use?
A. The CallbackHandler implementation in the WebLogic Authentication provider supports only stringified versions of a username and password when using form-based authentication. If a Web application requires more authentication information, use the javax.security.auth.TextInputCallback interface of the JAAS Callback application programming interface (API) in the code for your LoginModule. The implementation of the javax.security.auth.TextInputCallback interface needs to use the name of the authentication field as the prompt to the method constructor. For example: Callback[] callbacks=new Callback[1]; callbacks[1]=new TextInputCallback(“TextField”); try{ callbackHandler.handle(callbacks) textField1=((TextInputCallback)callbacks[2].getText } catch (java.io.IOException ioe) { throw new LoginException(ioe.toString()); }catch (UnsupportedCallbackException uce) { throw new LoginException (“Error:”+uce.getCallback().toString() + “not available to garner authentication information” + “from the
