private static boolean validateCallbackInformation ( Hashtable < String , Object > credData , String securityName , Invocation isInvoked ) { boolean status = true ; if ( isInvoked == Invocation . CALLERPRINCIPALCALLBACK ) { String existingName = ( String ) credData . get ( AttributeNameConstants . WSCREDENTIAL_SECURITYNAME ) ; if ( existingName != null && ! ( existingName . equals ( securityName ) ) ) { status = false ; Tr . error ( tc , "CALLBACK_SECURITY_NAME_MISMATCH_J2CA0675" , new Object [ ] { securityName , existingName } ) ; } } return status ; }
This method validates whether the user security name provided by the CallerPrincipalCallback and the PasswordValidationCallback match . It does this check only in case the CallerPrincipalCallback was invoked prior to the current invocation of the PasswordValidationCallback .