It’s a Dangerous World: Adding Security - Stripes...and Java Web Development is Fun Again - page 323

Joe Asks. . .
What About Other Security Mechanisms for Java Applica-
tions?
The specifications for Java web applications define standard
ways of implementing security mechanisms. I prefer simpler and
more lightweight solutions such as the ones I presented in this
chapter. Nevertheless, it's worth knowing your options. The Java
EE 5 Tutorial [ JBC + 06 ] is a good reference for all things Java
EE, including security mechanisms. I didn't cover them because
I wanted to present solutions that are more tightly integrated
with Stripes.
Spring Security ( http://www.springframework.org/spring-security )
and JSecurity ( http://www.jsecurity.org ) are other interesting solu-
tions for adding security to Java applications. Using them with
Stripes is not difficult, but again, I did not cover them to avoid
spending too much time on frameworks that are completely
orthogonal to Stripes.
A Sense of Security
We've put up several lines of defense to prevent malicious users from
harming the webmail application. We won't be staying up at night wor-
rying about security issues.