Java EE 7 Web应用程序的简单身份验证

Question

I am developing a JavaEE7(Postgres, Glassfish, Primefaces) web app for which I need a simple identity management and authentication. Something simple like identity management from seam2(seam-gen). I only need User, Group, Role and "Remember Me". An administrator should be able to create users ... from the app. User is also required for createdBy and updatedBy fields.

I checked Picketlink but I found it a bit overkill for what I need. I also checked Apache Shiro, but I am not sure if it's appropriate for managing users, roles and group directly from the app.

Any suggestion for a solution or a framework is Welcome

Thanks

Answer 1

I evaluated picketlink and apache shiro. Picketlink is heavy for the application type I am developing. I finally used apache shiro. The tutorial from BalusC was very helpful. Apache Shiro, is it ready for Java EE 6? (a JSF2-Shiro Tutorial)

and

Securing Your ADF Applications Using Apache Shiro