Ask questions and see you at March, 13th, 6.PM. CET: http://www.ustream.tv/channel/adambien
Also checkout recent episode:
Please keep the questions Java EE-stic. Means: as short and as concise as only possible. Feel free to ask several, shorter questions.
Hi Adam,
my question is about Java EE Security (Java EE 8) best practices (for which somehow there are surprisingly little resources, did anyone use JASPIC/JAAS etc. before?).
How to handle authentication and authorization (the Java EE way) in a module A which is used by other modules running on the same application server? One of the responsibilities of this module A is authentication/authorization which can be used by other modules.
Which interfaces to implement? How does this work with EJBs, should any of the implementing classes be EJBs?
Most examples I found are just about web app authentication and not about a module which doesnt care where the caller has the credentials from.
I already listened to your podcast about this.