Menu
I'm looking for a good security framework that allows to annotate parameter based access rules to methods.
Basicly i want to check if the authenticated user is allowed to call a certain method with a specific object as a parameter.
Spring security would serve my needs but because of this (spring forum) i'm looking for alternatives if i'm unable to get it to work.
Requirements:
Any recommendations?
761
The Spring Security framework is a reliable way for Java developers to secure applications. However, proper implementation is critical to prevent the most common vulnerabilities.
Spring Security allows customizing HTTP security for features such as endpoints authorization or the authentication manager configuration by extending a WebSecurityConfigurerAdapter class. However, since recent versions, Spring deprecates this approach and encourages a component-based security configuration.
To disable Security Auto-Configuration and add our own configuration, we need to exclude the SecurityAutoConfiguration class from auto-configuration. If you have spring-boot-actuator included in your dependecies then you need to exclude ManagementWebSecurityAutoConfiguration class from auto-configuration.
Apache Shiro stands in competition to Spring Security. Is easier, covers more. See here.
80
If you love us? You can donate to us via Paypal or buy me a coffee so we can maintain and grow! Thank you!
Donate Us With
