| Class | Description | 
|---|---|
| AbstractSecurityService | This security service chooses a UUID as its token as this can be serialized
 to clients, is mostly secure, and can be deserialized in a client vm without
 addition openejb-core classes. | 
| AbstractSecurityService.Group | |
| AbstractSecurityService.Identity | |
| AbstractSecurityService.ProvidedSecurityContext | |
| AbstractSecurityService.SecurityContext | |
| AbstractSecurityService.User | |
| ConnectorCallbackHandler | Spec 16.4.1: must support CallerPrincipalCallback, GroupPrincipalCallback, PasswordValidationCallback. | 
| JaccProvider | |
| JaccProvider.Factory | |
| JaccProvider.Policy | |
| SecurityContextHandler | |
| SecurityServiceImpl |