Java EE Security framework without involving the server

Question

I was looking into the security model of Java EE. It seems that the model involves configuring the web server (I am using glassfish 4.0).

What I am looking for is a security framework which I can add without any configuration of the server. For example-

I might pass my database credentials when starting the web application to one of the configuration classes of that framework, then I can call methods like- user.isAuthenticated() etc.

Another side question is, if I am using hibernate orm and also the Java EE security model then my hibernate is configured to connect to database and also my glassfish server is connected to the database. So is there any way I can skip connecting to the database only with hibernate but also use a security framework?

Answer 1

If you have a minimal familiarity with Spring Framework, take a look a this tutorial

There isn't server involvement. You can implement your own user.isAuthenticated() method.