Adam Bien's Weblog
Java EE Authentication and Authorization--A Free Article
Java EE authentication and authorization is more powerful and easier to use than expected. The recent Java Magazine article Secure Java EE Authentication covers Java EE security principles, dynamic and static authentication, as well as extension possibilities.
See also wisdomator--a companion, maven 3 sample application.
Thanks for reading! Feedback is, as always, highly appreciated!
Btw. there is also an Java Magazine iOS App.
See you at Java EE Workshops at MUC Airport!
Posted at 01:00PM Feb 01, 2013 by Adam Bien in Real World Java EE Patterns - Rethinking Best Practices | Comments[3] | Views/Hits: 4550
NEW Workshop: "JPA, NoSQL, Caching, Grids and Distributed Caches with Java EE 7", May 7th, 2013, Airport Munich
A book about rethinking Java EE Patterns
Tweet Follow @AdamBien

Very good article. Thank you
The Only thing that is frustrating about JAAS is that roles are hard coded inside application code wich make it not suitable for a wide range of cases.
Posted by faissal on February 24, 2013 at 12:39 AM CET #
@faissal: in the article Adam describes how to programmatically handle the role authorization using ProgrammaticallySecuredWisdomStorage, no necessity to hard coding the role inside application...
Posted by tex on March 07, 2013 at 01:32 AM CET #
Many thanks Adam, very good article !
What if I want BASIC auth accessing a restful resource and FORM based auth accessing html pages ?
Must I break the project in 2 parts and handle 2 separate contexts where the first has BASIC auth (restful resource) and the second has FORM based auth (html pages) ?
Many thanks in advance...
Posted by tex on March 07, 2013 at 01:44 AM CET #