Java SPNEGO Authentication & Kerberos Constrained Delegation (KCD) to backend service
问题 I have a Java web application which do SPNEGO authentication of clients in a Windows Active Directory environment. To authenticate the user we use code from the good old SPNEGO SourceForge project. String encodedAuthToken = (String) credentials; LOG.debug("Encoded auth token: " + encodedAuthToken); byte[] authToken = B64Code.decode(encodedAuthToken); GSSManager manager = GSSManager.getInstance(); try { Oid krb5Oid = new Oid("1.3.6.1.5.5.2"); GSSName gssName = manager.createName(_targetName,