What's New in Java EE 8: the Java EE Security API

on YouTube ↗42m

" summary

Covers the Java EE Security API and the Soteria reference implementation, showing how to build a secured web application with identity store handlers that validate credentials against LDAP or a database and simple hard‑coded stores for testing. Demonstrates CDI integration and injection of SecurityContext, how to implement custom authentication by writing an identity store, and how to create custom tokens to protect JAX‑RS endpoints, with demos from minimal setup to realistic LDAP/database mappings and group‑to‑role mapping.

AI-written summary · about

" chapters (12)

1. 0:00Java EE Security API intro
2. 2:10Why needed
3. 7:53Development timeline
4. 12:57Key API features
5. 18:47Demo setup
6. 22:10Basic auth with hardcoded creds
7. 24:05Custom login form & LDAP
8. 27:18Role-based access control
9. 33:06Multiple identity stores
10. 37:25Custom identity store & JWT
11. 40:41JWT tokens generation & validation
12. 42:08Q&A

" related talks

• 54mWhat's New in Java EE Security: JSR-375 and BeyondWill Hopkins · Devoxx US 2017
• 32mJakarta EE Security - Sailing Safe in Troubled WatersIvar Grimstad, Werner Keil · EclipseCon 2022
• 38mIdentity and Access Management in the 21st CenturyGerke Kok · J-Fall 2015
• 52mSecure Authentication and Session Management in Java EEPatrycja Wegrzynowicz · Voxxed Days Vienna 2016
• 47mImplement defence in depth for your Java API:sTobias Ahnoff, Erica Löfström · Jfokus 2022
• 01h 33mA How to Guide to Security in the PAAS CloudShawn McKinney, John Field · SpringOne2GX 2015
• 43mSecurity Architecture of the Java PlatformMartin Toshev · JavaDay Kyiv 2015
• 52mSecurity Control EnhancementsJim Manico · NDC Security 2022