Question

I am using Spring3.1 in a standalone env.

Although I am using Spring I am sure there could be other Java-ee frameworks(EJB,..) which I could adopt ideas from.

I am trying to build my security layer architecture and I would like to have a good idea by your experience how should I do so.

My application(non web application) is connected to an external protocol.

That protocol when you implement it is responsible for all the connection layer including login.

After a user login he can do certain commands like: subscribe, unsubscribe and so on..

When My app getting the login trigger I am auth the user via id agaisnt our database and then Via that protocol I response with reject or success messgae.

Afer success auth I can get from the user via the external protocol certain messages(subscribe, unsubscribe and so on..)

How should I wrap my app with the security layer ?

I thought about planning an aspect and create auth method for each method to double check that a user is really logged in?

how will I manage all logged in/non logged in users..

mybe the protocol layer(which I mention above) is enough for me?

Any ideas will be welcome.

thanks,
ray.

Answer 1

you should take a look at http://static.springsource.org/spring-security/site/