Authentication and authorization of Java websites

Given these technologies: Java, JAX-RS (or RESTEasy og Jersey), Javascript, and jQuery. The servlet server is Tomcat or Jetty. The GUI will be created as an β€œapplication” using jQuery and Javascript. MVC or MVP templates will be used to separate the view from the model. It is planned to download the application after logging in. I need a recommendation on how to make a secure login and manage access (roles). So far, I know about SSL, encryption, security annotations (to protect methods), but still I need an overview and tips. So far, I plan to start reading the Java SE documentation at:

http://www.oracle.com/technetwork/java/javase/tech/index-jsp-136007.html#overview

Some input will be appreciated.

+4
source share
2 answers

Apache Shiro for JAAS - http://shiro.apache.org/

+6
source

I would recommend a look at the Spring Security library. It is highly customizable, well-documented, and is often used and discussed on the Internet. You may have heard about this before under your old name, Achegi.

+2
source

Source: https://habr.com/ru/post/1403338/


All Articles