Java Web Authentication and Authorization

Question

Given these techonologies: Java, JAX-RS (either RESTEasy og Jersey), Javascript and jQuery. The servlet server is either Tomcat or Jetty. The GUI will be made as an "application" using jQuery and Javascript. MVC or MVP patterns will be used to separate view from model. The plan is to load the application after login. I need some recommendation on how to make a secure login and manage access (roles). So far I know about SSL, encryption, Security Annotations (to guard methods) - but still, I need some overview and tips. So far my plan is to start reading the Java SE documentation at:

http://www.oracle.com/technetwork/java/javase/tech/index-jsp-136007.html#overview

Some input would be appreciated.

It is a good thing that you sought after a JAAS framework / library instead of what i mostly see people do - rolling out their own "security" features. — HJW
– HJW, Commented Mar 25, 2012 at 16:46

HJW · Accepted Answer · 2012-03-25 16:44:34Z

6

Apache Shiro for JAAS - http://shiro.apache.org/

answered Mar 25, 2012 at 16:44

HJW

23.5k51 gold badges147 silver badges218 bronze badges

Sign up to request clarification or add additional context in comments.

Comments

Kaleb Brasee · Accepted Answer · 2012-03-25 16:42:53Z

2

I'd recommend taking a look at the Spring Security library. It is highly customizable, documented well, and often used and discussed on the web. You may have heard of it before under its old name, Acegi.

answered Mar 25, 2012 at 16:42

Kaleb Brasee

52.1k9 gold badges113 silver badges114 bronze badges

Collectives™ on Stack Overflow

Java Web Authentication and Authorization

2 Answers 2

Comments

Comments

Your Answer

Linked

Hot Network Questions

Collectives™ on Stack Overflow

2 Answers 2

Comments

Comments

Your Answer

Sign up or log in

Post as a guest

Linked

Related