Webapp Security

Seite 1

3 aspects of webapp security

- authentication

-authorization

- dataprotection

Container managed security

- Security feature provided by server

- [Wildfly] supports 3 types of authentication

- Http Basic - new browser page opens up and asks for username and password

- Form Based - new web from for username and password

- Digest - improved version Http basic username and password is hashed(encrypted)

- A container can enforce security in 3 ways:

- declarative security

- metadata annotations

- programmatic security

Securing webapps

- secure urls

- method level security