Java Web应用程序中是否有用于身份验证的库？

Question

Hi I am look for a proven java security web-library which is a bit more low-level and therefore less intrusive than the well known frameworks spring-security and apache shiro.

Just something which has best-practive utility-apis for example to encode a remember-me cookie or for dighest authentication, accessing ldap. All the sutff which is so useful in the above frameworks but without needing to follow the frameworks filters and indriections an application-context or yet another ini file etc.

Answer 1

看一下Apache Shiro项目，它比标准库做的更多，并且非常容易。

Answer 2

好吧，您始终可以使用HttpServletRequest.login()方法或j_security_check并为您的特定服务器在其下实现身份验证管理器，这几乎是默认的和低级标准的东西。 ，安全框架。

Answer 3

如果您不想使用任何一种，请使用Tomcat和Jetty都提供的容器管理的安全性。