Tech-Today
Recently, I've done some research on several Java Security Framework that can perform authentication, authorization and cryptography.
I've worked with Apache Shiro, it's really good and complete but I've found several problems like there's no default implementation for CDI interceptor for security annotations. Here's a sample implementation and setup that I did long ago: http://czetsuya-tech.blogspot.com/2012/10/how-to-integrate-apache-shiro-with.html.
And long time ago I've used seam2-security and now I'm trying with seam3, here goes.
1.) I started by creating a javaee6 project generated from jboss maven archetype (ear type). This could also be done on a war type project ofcourse (where the ejbs are in ejb project).
2.) In your main project maven's depedencyManagement section add:
3.) And in the ejb project maven's dependencies section add seam3-security dependency:
4.) In web project, create a beans.xml file in WEB-INF folder. This file is also required for CDI to work. And here we define the interceptor:
5.) Then we have to define the interceptor class:
6.) To hide a component in the UI you can use identity.hasPermission or identity.hasRole.
7.) You can download the source code from google code at: http://code.google.com/p/czetsuya/source/browse/#svn%2Ftrunk%2Fjboss7-seam3-security CodeProject
- Secure Spring Boot Rest Project With Keycloak
1. OverviewIn this blog, we will cover the basics of securing a Spring project with Keycloak using keycloak-spring-boot-starter and keycloak-spring-security-adapter.2. LimitationKeycloak is already a well-documented topic that needs no further write up....
- Custom Application Context Or Name In Jboss Or Wildfly
As far as I know there are 3 ways to deploy an application in JBoss or Wildfly with a custom application context name. 1.) By adding jboss-web.xml in your web project WEB-INF folder; <?xml version="1.0" encoding="UTF-8"?> <jboss-web xmlns="http://www.jboss.com/xml/ns/javaee"...
- How To Use Primefaces With Jboss 7.1.3
This tutorial will teach us how to use primefaces with jboss 7.1.3. Requirements: 1.) primefaces 3.5 2.) jboss 7.1.3 3.) maven javaee6 generated project (ear, war, ejb) Steps: 1.) Add primefaces module in jboss. a.) In JBOSS_HOME/modules...
- How To Use Shiro With Jdbc On Javaee6 And Glassfish
Before you proceed with this tutorial, it's best to from this link to know how to setup a JavaEE6 project with Shiro integrated: http://czetsuya-tech.blogspot.com/2012/10/how-to-integrate-apache-shiro-with.html From there we will focus on the changes:...
- Setting Up The Seam Examples In Jboss Server On A Windows Pc
I've been here before but that was a long time ago so here I am again playing with seam framework because my work requires me to. I notice there is no straightforward tutorial on how to make this so I'm making one. Download and install the following....
Tech-Today
How to setup seam3-security in JBoss 7
Recently, I've done some research on several Java Security Framework that can perform authentication, authorization and cryptography.
I've worked with Apache Shiro, it's really good and complete but I've found several problems like there's no default implementation for CDI interceptor for security annotations. Here's a sample implementation and setup that I did long ago: http://czetsuya-tech.blogspot.com/2012/10/how-to-integrate-apache-shiro-with.html.
And long time ago I've used seam2-security and now I'm trying with seam3, here goes.
1.) I started by creating a javaee6 project generated from jboss maven archetype (ear type). This could also be done on a war type project ofcourse (where the ejbs are in ejb project).
2.) In your main project maven's depedencyManagement section add:
<dependency>This will ensure that we are using the correct seam-jar versions across our projects.
<groupId>org.jboss.seam</groupId>
<artifactId>seam-bom</artifactId>
<version>3.1.0.Final</version>
<scope>import</scope>
<type>pom</type>
</dependency>
3.) And in the ejb project maven's dependencies section add seam3-security dependency:
<dependency>
<groupId>org.jboss.seam.security</groupId>
<artifactId>seam-security</artifactId>
<scope>compile</scope>
</dependency>
4.) In web project, create a beans.xml file in WEB-INF folder. This file is also required for CDI to work. And here we define the interceptor:
<?xml version="1.0" encoding="UTF-8"?>
<beans xmlns="http://java.sun.com/xml/ns/javaee" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
xmlns:s="urn:java:ee" xmlns:security="urn:java:org.jboss.seam.security"
xsi:schemaLocation="http://java.sun.com/xml/ns/javaee http://jboss.org/schema/cdi/beans_1_0.xsd">
<interceptors>
<class>org.jboss.seam.security.SecurityInterceptor</class>
</interceptors>
<security:IdentityImpl>
<s:modifies />
<security:authenticatorClass>com.czetsuya.security.Authenticator
</security:authenticatorClass>
</security:IdentityImpl>
</beans>
5.) Then we have to define the interceptor class:
package com.czetsuya.security;
import javax.enterprise.inject.Model;
import javax.inject.Inject;
import org.jboss.seam.security.BaseAuthenticator;
import org.jboss.seam.security.Credentials;
import org.picketlink.idm.impl.api.PasswordCredential;
import org.picketlink.idm.impl.api.model.SimpleUser;
@Model
public class Authenticator extends BaseAuthenticator {
@Inject
Credentials credentials;
public Authenticator() {
}
@Override
public void authenticate() {
System.out.println("logging in: " + credentials.getUsername());
if ("demo".equals(credentials.getUsername())
&& credentials.getCredential() instanceof PasswordCredential
&& "demo".equals(((PasswordCredential) credentials.getCredential()).getValue())) {
setStatus(AuthenticationStatus.SUCCESS);
setUser(new SimpleUser("demo"));
}
}
}
6.) To hide a component in the UI you can use identity.hasPermission or identity.hasRole.
7.) You can download the source code from google code at: http://code.google.com/p/czetsuya/source/browse/#svn%2Ftrunk%2Fjboss7-seam3-security CodeProject
- Secure Spring Boot Rest Project With Keycloak
1. OverviewIn this blog, we will cover the basics of securing a Spring project with Keycloak using keycloak-spring-boot-starter and keycloak-spring-security-adapter.2. LimitationKeycloak is already a well-documented topic that needs no further write up....
- Custom Application Context Or Name In Jboss Or Wildfly
As far as I know there are 3 ways to deploy an application in JBoss or Wildfly with a custom application context name. 1.) By adding jboss-web.xml in your web project WEB-INF folder; <?xml version="1.0" encoding="UTF-8"?> <jboss-web xmlns="http://www.jboss.com/xml/ns/javaee"...
- How To Use Primefaces With Jboss 7.1.3
This tutorial will teach us how to use primefaces with jboss 7.1.3. Requirements: 1.) primefaces 3.5 2.) jboss 7.1.3 3.) maven javaee6 generated project (ear, war, ejb) Steps: 1.) Add primefaces module in jboss. a.) In JBOSS_HOME/modules...
- How To Use Shiro With Jdbc On Javaee6 And Glassfish
Before you proceed with this tutorial, it's best to from this link to know how to setup a JavaEE6 project with Shiro integrated: http://czetsuya-tech.blogspot.com/2012/10/how-to-integrate-apache-shiro-with.html From there we will focus on the changes:...
- Setting Up The Seam Examples In Jboss Server On A Windows Pc
I've been here before but that was a long time ago so here I am again playing with seam framework because my work requires me to. I notice there is no straightforward tutorial on how to make this so I'm making one. Download and install the following....