rdf-syntax-grammar
mods:
  schema location: http://www.loc.gov/mods/v3 http://www.loc.gov/standards/mods/v3/mods-3-2.xsd
  title info:
    non sort: The
    title: definitive guide to security in Jakarta EE
    sub title: securing Java-based enterprise applications with Jakarta security, authorization, authentication and more
  name:
    name part: Tijms, Arjan
    role:
      role term: creator
    role:
      role term: author.
  name:
    name part: Bais, Teo
    role:
      role term: author.
  name:
    name part: Keil, Werner
    role:
      role term: author.
  type of resource: text
  origin info:
    place:
      place term: nyu
    date issued: 2022
    issuance: monographic
  language:
    language term: eng
  physical description:
    form: remote
    extent: 1 online resource (652 pages) : color illustrations
  abstract: Refer to this definitive and authoritative book to understand the Jakarta EE Security Spec, with Jakarta Authentication & Authorization as its underlying official foundation. Jakarta EE Security implementations are discussed, such as Soteria and Open Liberty, along with the build-in modules and Jakarta EE Security third-party modules, such as Payara Yubikey & OIDC, and OmniFaces JWT-Auth. The book discusses Jakarta EE Security in relation to SE underpinnings and provides a detailed explanation of how client-cert authentication over HTTPS takes place, how certifications work, and how LDAP-like names are mapped to caller/user names. General (web) security best practices are presented, such as not storing passwords in plaintext, using HTTPS, sanitizing inputs to DB queries, encoding output, and explanations of various (web) attacks and common vulnerabilities are included. Practical examples of securing applications discuss common needs such as letting users explicitly log in, sign up, verify email safely, explicitly log in to access protected pages, and go direct to the log in page. Common issues are covered such as abandoning an authentication dialog halfway and later accessing protected pages again. What You Will Learn Know what Jakarta/Java EE security includes and how to get started learning and using this technology for today's and tomorrow's enterprise Java applications Secure applications: traditional server-side web apps built with JSF (Faces) as well as applications based on client-side frameworks (such as Angular) and JAX-RS Work with the daunting number of security APIs in Jakarta EE Understand how EE security evolved Who This Book Is For Java developers using Jakarta EE and writing applications that need to be secured (every application). Basic knowledge of Servlets and CDI is assumed. Library writers and component providers who wish to provide additional authentication mechanisms for Jakarta EE also will find the book useful.
  table of contents: Intro -- Table of Contents -- About the Authors -- About the Technical Reviewer -- Chapter 1: Security History -- The Beginning -- Enter Jakarta EE -- Enter Jakarta Authorization -- Enter Jakarta Authentication -- Foreshadowing Shiro Part I -- IL DRBAC -- Enter Spring Security -- Where is Jakarta Authentication? Enter JAuth -- Foreshadowing Shiro Part II -- JSecurity -- Jakarta Authentication -- Edging closer -- Jakarta Authentication -- Finally in Jakarta EE -- Enter OmniSecurity -- Enter Jakarta Security -- Chapter 2: Jakarta EE Foundations -- Physical Security -- Technological Security
  table of contents: Application Security -- OS Security -- Network Security -- Policies and Procedures -- Key Principles of Security -- Features of a Security Mechanism -- Distributed Multitiered Applications -- Single-Tier vs. Multitiered Applications -- The Jakarta EE Approach -- Security in Jakarta EE -- Simple Application Security Walkthrough -- Looking Ahead -- Authentication -- Something You Know -- Something You Have -- Something You Are -- Latest Trends in Authentication Methods -- Authentication Examples in Practice -- Authenticating Users Programmatically -- Authorization -- Access Control Lists
  table of contents: Access Control Models -- Discretionary Access Control (DAC) -- Mandatory Access Control (MAC) -- Role-Based Access Control (RBAC) -- RBAC (Role-Based Access Control) -- Benefits of RBAC -- RBAC - Key Principles -- RBAC in Jakarta EE -- Users, Groups, and Roles -- What Is a User? -- What Is a Group? -- What Is a Role? -- Digital Certificates -- What Is a Digital Certificate -- Introduction to TLS -- Who Can Issue Certificates? -- Self-Signing a Certificate -- Certificate Authority -- Looking Ahead -- Authentication Mechanisms -- What Is an Authentication Mechanism?
  table of contents: What Does an Authentication Mechanism Specify? -- Jakarta EE Authentication Mechanisms -- Basic Authentication -- What Is -- How It Works -- How to Configure It -- Form-Based Authentication -- What Is -- How It Works -- How to Configure It -- Digest Authentication -- What Is -- How It Works -- How to Configure It -- Client Authentication -- What Is -- How It Works -- How to Configure It -- Custom Form Authentication -- What Is -- How to Define It -- Identity Stores -- What Is an Identity Store? -- What Is the Purpose of an Identity Store? -- Identity Store and Jakarta EE
  table of contents: IdentityStore - Theory of Operation -- Validating Credentials -- Retrieving Caller Information -- Declaring Capabilities -- How to Validate a User Credential -- Looking Ahead -- Chapter 3: Jakarta Authentication -- What Is Jakarta Authentication? -- Jakarta Authentication in Jakarta EE -- The Authentication Mechanism -- The Basic Authentication Mechanism -- The Form Authentication Mechanism -- Jakarta Authentication's ServerAuthModule -- Example ServerAuthModule -- Example ServerAuthModule - GlassFish -- Example ServerAuthModule - Tomcat -- Example ServerAuthModule - Basic
  note: Arjan Tijms, Teo Bais, Werner Keil.
  note: Includes index.
  subject:
    topic: Java (Computer program language)
  subject:
    topic: Computer security
  subject:
    topic: Cloud computing
  subject:
    topic: Application software
    topic: Development
  subject:
    topic: Computer Security
  subject:
    topic: Java (Langage de programmation)
  subject:
    topic: Sécurité informatique
  subject:
    topic: Infonuagique
  subject:
    topic: Logiciels d'application
    topic: Développement
  subject:
    topic: Application software
    topic: Development
  subject:
    topic: Cloud computing
  subject:
    topic: Computer security
  subject:
    topic: Java (Computer program language)
  classification: QA76.9.A25
  classification: 005.8
  related item:
    title info:
      title: The Definitive Guide to Security in Jakarta EE
    name:
      name part: Tijms, Arjan
    origin info:
      publisher: Berkeley, CA : Apress L. P.,c2022
  identifier: 9781484279458
  identifier: 148427945X
  identifier: 1484279441
  identifier: 9781484279441
  identifier: 9781484279458 O'Reilly Media
  identifier: https://proxy.library.tamu.edu/login
  record info:
    record content source: ORMDA
    record creation date: 220419
    record change date: 20260128223951.1
    record identifier: in00004670909
    language of cataloging:
      language term: eng