The Security 1.0 API is a brand new API specification in Java EE 8 that provides a new programming model for securing enterprise applications. The security API version 1.0 is a reference implementation of JSR 375, the Java EE Security API specification. This specification is aimed at simplifying and supporting new security aspects for platform services, standardizing the way that we secure applications. The security API is annotation-driven and uses a lot of CDI and Expression Language (EL) to make the implementation easier.
The key features of the security API implementation include the following:
- The IdentityStore mechanism
- HttpAuthenticationMechanism
- The SecurityContext interface
IdentityStore provides an implementation for storing user details, but other implementations are also out there, such as an embedded store, a database store, and the...
