case, one might want to implement the Destroyable interface. Refreshable might be useful if a credential has only a limited timespan in which it is valid. See also Apache Shiro Keystore OACC References External links JAAS Tutorial jGuard : open source project which can secure standalone or web applications based on JAAS SPNEGO Library - open source GNU LGPL project that relies on the JAAS framework to simplify Authentication and Authorization Java APIs Computer access control