Acegi is now called Spring Security, and with that they have greatly reduced the xml configuration files required get started. Other great features: - annotations, so you have per-method authorisation if you like - ubiquitous security, so you define once and it's applied everywhere, as opposed to having to remember to explicitly secure a resource - Spring Security's authentication context object can be accessed programmatically, so from your GWT app you can write an RPC function that delves into the authentication context and pulls out the current user's username and roles, if you want! - highly configurable but for newbies it's default convention-over- configuration settings work beautifully and can very easily be wired to push and pull users and roles from a MySQL database, and store passwords hashed, etc. The Spring Security team have pretty much every combination of features covered for your needs. Ben Alex did a wonderful presentation in Sweden which they recorded and put on their website... if only I could find that you'd be well on your way
On Jul 1, 7:13 pm, sbrombo <[email protected]> wrote: > Hi everyone, > > *Really short version*: I'd like suggestions on possible libraries/ > projects to provide/develop the user registration/login/sessions > within a GWT site. Off-the-shelf solutions are ok, too. > > Now some more details about my project: > > I'm a novice GWT user currently in the preliminary "tech analysis" > stage of a site development project, i.e. I am trying to identify the > libraries and components to use along GWT to speed up the development. > > The core of my project is to let users register on my site, fill in > some form fields with some personal data, and then use a search > function to find users with matching data. > > I'm currently thinking about using a MySQL DB to hold all user data, > and develop all site functionalities with GWT. The thing I'm missing > is what to use to handle user registration/login/sessions. With some > searching I found: > - the Acegi security project, suggested in GWT tutorials; > - the Apache Shiro project, which seems not compatible with GWT due to > client code translation issues. > > It looks like using Acegi requires a lot of design&dev time, and > serious security-oriented skills, while I'm looking for something > possibly more "off-the-shelf", which would wrap the user management in > a simple way, or even provide a basic implementation of user > registration and session functionality. Also an open, simple "CMS- > like" project which I could expand and customize with GWT is > acceptable, since site design is now only at the early functional > study and is hence very flexible. > > Any suggestion would be really appreciated. > > Regards, > M. -- You received this message because you are subscribed to the Google Groups "Google Web Toolkit" group. To post to this group, send email to [email protected]. To unsubscribe from this group, send email to [email protected]. For more options, visit this group at http://groups.google.com/group/google-web-toolkit?hl=en.
