Secure application about cargotracker

[m-reza-rahman]

Yes, we can do this as part of our Jakarta EE 8 release. Probably just using the same database we use now for simplicity.

Reza Rahman
Jakarta EE Ambassador, Author, Blogger, Speaker

Please note views expressed here are my own as an individual community member and do not reflect the views of my employer.

[glassfishrobot]

• Issue Imported From: javaee/cargotracker#16
• Original Issue Raised By:@glassfishrobot
• Original Issue Assigned To: @glassfishrobot

[glassfishrobot]

@glassfishrobot Commented
Reported by reza_rahman

[glassfishrobot]

@glassfishrobot Commented
reza_rahman said:
Deferring this to a Java EE 8 version of the application. Could do this now but prefer a bit more portability.

[glassfishrobot]

@glassfishrobot Commented
Was assigned to reza_rahman

[glassfishrobot]

@glassfishrobot Commented
This issue was imported from java.net JIRA CARGOTRACKER-16

[thadumi]

@m-reza-rahman we already discussed about the security and LDAP (it would be a good use case for the users of the mobile interface) as future improvements. I'd like to give this an high priority. Of course after the release of Jakarta 9 version.

[rdebusscher]

Using Java EE security/JAAS.

I assume when using Java EE 8, the Security API, in combination with LDAP or even better OAuth2/OpenIdConnect is the best option.

[m-reza-rahman]

The original plan was to keep it pretty simple using form based authentication backed by a database (the same database as the application). On the authorization side, the plan was to use simple role based security. I think it all doable via plain Jakarta EE 8/Jakarta Security.

We can of course always evolve things and add more advanced features once we get the basics right.

Reza Rahman
Jakarta EE Ambassador, Author, Blogger, Speaker

Please note views expressed here are my own as an individual community member and do not reflect the views of my employer.

[m-reza-rahman]

Closing this for now. This might make demos and getting started difficult.