About Spring security:spring Security

About Spring Security

The two core areas of security are: Authentication and authorization.

· Authentication is an identity authentication that controls the entry of a system.

· Authorization is an authorization that is used for access control of functions in the system.

Spring Security provides a comprehensive solution for the EE project, supporting authentication and authorization.

Spring Security offers a broad range of support for authentication. Multiple authentication technologies are integrated:

• HTTP BASIC Authentication Headers (an IETF rfc-based standard)
• HTTP Digest Authentication Headers (an IETF rfc-based)
• HTTP Client Certificate Exchange (an IETF rfc-based)
• LDAP (a very common approach to cross-platform authentication needs, especially in large environments)
• Form-based Authentication (for simple user interface needs)
• OpenID Authentication
• Authentication based on pre-established request headers (such as computer Associates Siteminder)
• Ja-sig Central authentication Service (otherwise known as CAS, which are a popular open source single sign-on system)
• Transparent Authentication Context propagation for Remote Method invocation (RMI) and Httpinvoker (a Spring remoting proto Col
• Automatic "Remember-me" Authentication (so your can tick a box to avoid re-authentication for a predetermined period of Tim E
• Anonymous authentication (allowing every unauthenticated call to automatically assume a particular security identity)
• Run-as authentication (which is useful if one call should proceed with a different security identity)
• Java Authentication and Authorization Service (JAAS)
• JEE container autentication (so can still use container Managed authentication if desired)
• Kerberos
• Java Open Source Single Sign On (Josso) *
• OpenNMS Network Management Platform *
• AppFuse *
• ANDROMDA *
• Mule ESB *
• Direct Web Request (DWR) *
• Grails *
• Tapestry *
• Jtrac *
• Jasypt *
• Roller *
• Elastic Path *
• Atlassian Crowd *
• Your own authentication systems (see below)

Description of the Spring security jar package

Use maven to get spring Security:

<Dependencies> <!--... other dependency elements ... - 　　 <Dependency> 　　　　 <groupId>Org.springframework.security</groupId> 
<Artifactid>Spring-security-web</Artifactid> 
<version>3.2.5.RELEASE</version> 　　 </Dependency> 　　 <Dependency> 　　　　 <groupId>Org.springframework.security</groupId> 
 　　　　 <Artifactid>Spring-security-config</Artifactid> 
<version>3.2.5.RELEASE</version> 　　 </Dependency></Dependencies>

This section above is the necessary jar package for spring security.