If you will deploy to a servlet container, have a look on the security it has to offer. Then solve the problem at the client side.
2010/7/2 Paul Schwarz <[email protected]> > Acegi is now called Spring Security, and with that they have greatly > reduced the xml configuration files required get started. Other great > features: > - annotations, so you have per-method authorisation if you like > - ubiquitous security, so you define once and it's applied everywhere, > as opposed to having to remember to explicitly secure a resource > - Spring Security's authentication context object can be accessed > programmatically, so from your GWT app you can write an RPC function > that delves into the authentication context and pulls out the current > user's username and roles, if you want! > - highly configurable but for newbies it's default convention-over- > configuration settings work beautifully and can very easily be wired > to push and pull users and roles from a MySQL database, and store > passwords hashed, etc. The Spring Security team have pretty much every > combination of features covered for your needs. > Ben Alex did a wonderful presentation in Sweden which they recorded > and put on their website... if only I could find that you'd be well on > your way > > On Jul 1, 7:13 pm, sbrombo <[email protected]> wrote: > > Hi everyone, > > > > *Really short version*: I'd like suggestions on possible libraries/ > > projects to provide/develop the user registration/login/sessions > > within a GWT site. Off-the-shelf solutions are ok, too. > > > > Now some more details about my project: > > > > I'm a novice GWT user currently in the preliminary "tech analysis" > > stage of a site development project, i.e. I am trying to identify the > > libraries and components to use along GWT to speed up the development. > > > > The core of my project is to let users register on my site, fill in > > some form fields with some personal data, and then use a search > > function to find users with matching data. > > > > I'm currently thinking about using a MySQL DB to hold all user data, > > and develop all site functionalities with GWT. The thing I'm missing > > is what to use to handle user registration/login/sessions. With some > > searching I found: > > - the Acegi security project, suggested in GWT tutorials; > > - the Apache Shiro project, which seems not compatible with GWT due to > > client code translation issues. > > > > It looks like using Acegi requires a lot of design&dev time, and > > serious security-oriented skills, while I'm looking for something > > possibly more "off-the-shelf", which would wrap the user management in > > a simple way, or even provide a basic implementation of user > > registration and session functionality. Also an open, simple "CMS- > > like" project which I could expand and customize with GWT is > > acceptable, since site design is now only at the early functional > > study and is hence very flexible. > > > > Any suggestion would be really appreciated. > > > > Regards, > > M. > > -- > You received this message because you are subscribed to the Google Groups > "Google Web Toolkit" group. > To post to this group, send email to [email protected]. > To unsubscribe from this group, send email to > [email protected]<google-web-toolkit%[email protected]> > . > For more options, visit this group at > http://groups.google.com/group/google-web-toolkit?hl=en. > > -- You received this message because you are subscribed to the Google Groups "Google Web Toolkit" group. To post to this group, send email to [email protected]. To unsubscribe from this group, send email to [email protected]. For more options, visit this group at http://groups.google.com/group/google-web-toolkit?hl=en.
