Description
Book SynopsisRefer to this definitive and authoritative book to understand the Jakarta EE Security Spec, with Jakarta Authentication & Authorization as its underlying official foundation. Jakarta EE Security implementations are discussed, such as Soteria and Open Liberty, along with the build-in modules and Jakarta EE Security third-party modules, such as Payara Yubikey & OIDC, and OmniFaces JWT-Auth.
The book discusses Jakarta EE Security in relation to SE underpinnings and provides a detailed explanation of how client-cert authentication over HTTPS takes place, how certifications work, and how LDAP-like names are mapped to caller/user names. General (web) security best practices are presented, such as not storing passwords in plaintext, using HTTPS, sanitizing inputs to DB queries, encoding output, and explanations of various (web) attacks and common vulnerabilities are included.
Practical examples of securing applications discuss commo
Table of Contents1: Security History
2: Jakarta EE Foundations
3: Jakarta Authentication
4: Jakarta Authorization
5: Jakarta Security
6: Java SE Underpinnings
7: EE Implementations
8: MicroProfile JWT
Appendix A: Spring Security
Appendix B: Apache Shiro
Appendix C: Identity Management
