Book Image

Jakarta EE Application Development - Second Edition

By : David R. Heffelfinger
Book Image

Jakarta EE Application Development - Second Edition

By: David R. Heffelfinger

Overview of this book

Jakarta EE stands as a robust standard with multiple implementations, presenting developers with a versatile toolkit for building enterprise applications. However, despite the advantages of enterprise application development, vendor lock-in remains a concern for many developers, limiting flexibility and interoperability across diverse environments. This Jakarta EE application development guide addresses the challenge of vendor lock-in by offering comprehensive coverage of the major Jakarta EE APIs and goes beyond the basics to help you develop applications deployable on any Jakarta EE compliant runtime. This book introduces you to JSON Processing and JSON Binding and shows you how the Model API and the Streaming API are used to process JSON data. You’ll then explore additional Jakarta EE APIs, such as WebSocket and Messaging, for loosely coupled, asynchronous communication and discover ways to secure applications with the Jakarta EE Security API. Finally, you'll learn about Jakarta RESTful web service development and techniques to develop cloud-ready microservices in Jakarta EE. By the end of this book, you'll have developed the skills to craft secure, scalable, and cloud-native microservices that solve modern enterprise challenges.
Table of Contents (18 chapters)
15
Chapter 15: Putting it All Together

Securing Jakarta EE Applications

Jakarta EE Security standardizes application security across all Jakarta EE-compliant application servers. The API includes standardized access to identity stores, which allow a uniform way of retrieving user credentials from a relational or Lightweight Directory Access Protocol (LDAP) database, as well as allowing us to implement access to custom identity stores. Jakarta EE Security includes authentication mechanism support, allowing us to authenticate a user in a standard way. Several authentication mechanisms are supported, such as the basic authentication supported by most browsers, client certificates, and HTML forms.

The following topics will be covered in this chapter:

  • Identity stores
  • Authentication mechanisms

Note

Example source code for this chapter can be found on GitHub at the following link: https://github.com/PacktPublishing/Jakarta-EE-Application-Development/tree/main/ch10_src.