[Wow... I've become quite the spammer over the past few days...]

I need to start thinking about authentication. I noticed that in Pax
Wicket SNAPSHOT, there are now a few docs that discuss this, and I'll be
looking into that in detail very soon.

For now, I thought I'd ask your advice from the backend perspective.
I've never developed this before, so maybe those with more experience
could help me out.

It seems to me that I'll need to store, for each user:

 - username
 - password
 - lastlogin
 - roles

Does that sound right?


What issues should I consider, with regards to security especially and
also stability and usability?

Or, are there any good articles or books that could help me consider
some of the issues I'll need to deal with?

Then I'll be able to apply this to the Pax Wicket (i.e. Wicket + OSGi)
environment.


Thanks so much!
Dave




_______________________________________________
general mailing list
[email protected]
http://lists.ops4j.org/mailman/listinfo/general

Reply via email to