Security is the most important aspect of any middleware solution in the cloud era. By security, we mean authentication and authorization features found in nearly any kind of software solution. Any of your users should log in to identify themselves before delving into your system, and also should be authorized to access whatever resources they are requesting from your system.
Since the beginning of Java EE, security APIs (namely JACC and JASPIC) have always been there. However, over time, those APIs got more complex and became just not flexible enough to support the required features of modern security APIs in an easy and standard manner. Therefore, in Java EE 8, a new security API has been introduced (without elimination of the mentioned legacy APIs) to overcome the problems mentioned earlier.
In this chapter, we're going to...
