國立高雄大學圖資館 |

Language: English

Back

The definitive guide to security in Jakarta EEsecuring Java-based enterprise applications with Jakarta security, authorization, authentication and more /

Record Type:	Electronic resources : Monograph/item
Title/Author:	The definitive guide to security in Jakarta EEby Arjan Tijms, Teo Bais, Werner Keil.
Reminder of title:	securing Java-based enterprise applications with Jakarta security, authorization, authentication and more /
Author:	Tijms, Arjan.
other author:	Bais, Teo.
Published:	Berkeley, CA :Apress :2022.
Description:	xvii, 638 p. :ill. (some col.), digital ;24 cm.
Contained By:	Springer Nature eBook
Subject:	Java (Computer program language)
Online resource:	https://doi.org/10.1007/978-1-4842-7945-8
ISBN:	9781484279458$q(electronic bk.)

The definitive guide to security in Jakarta EEsecuring Java-based enterprise applications with Jakarta security, authorization, authentication and more /
Tijms, Arjan.

The definitive guide to security in Jakarta EEsecuring Java-based enterprise applications with Jakarta security, authorization, authentication and more /[electronic resource] :by Arjan Tijms, Teo Bais, Werner Keil. - Berkeley, CA :Apress :2022. - xvii, 638 p. :ill. (some col.), digital ;24 cm.

1: Security History -- 2: Jakarta EE Foundations -- 3: Jakarta Authentication -- 4: Jakarta Authorization -- 5: Jakarta Security -- 6: Java SE Underpinnings -- 7: EE Implementations -- 8: MicroProfile JWT -- Appendix A: Spring Security -- Appendix B: Apache Shiro -- Appendix C: Identity Management.

Refer to this definitive and authoritative book to understand the Jakarta EE Security Spec, with Jakarta Authentication & Authorization as its underlying official foundation. Jakarta EE Security implementations are discussed, such as Soteria and Open Liberty, along with the build-in modules and Jakarta EE Security third-party modules, such as Payara Yubikey & OIDC, and OmniFaces JWT-Auth. The book discusses Jakarta EE Security in relation to SE underpinnings and provides a detailed explanation of how client-cert authentication over HTTPS takes place, how certifications work, and how LDAP-like names are mapped to caller/user names. General (web) security best practices are presented, such as not storing passwords in plaintext, using HTTPS, sanitizing inputs to DB queries, encoding output, and explanations of various (web) attacks and common vulnerabilities are included. Practical examples of securing applications discuss common needs such as letting users explicitly log in, sign up, verify email safely, explicitly log in to access protected pages, and go direct to the log in page. Common issues are covered such as abandoning an authentication dialog halfway and later accessing protected pages again. What You Will Learn Know what Jakarta/Java EE security includes and how to get started learning and using this technology for today's and tomorrow's enterprise Java applications Secure applications: traditional server-side web apps built with JSF (Faces) as well as applications based on client-side frameworks (such as Angular) and JAX-RS Work with the daunting number of security APIs in Jakarta EE Understand how EE security evolved.

ISBN: 9781484279458$q(electronic bk.)

Standard No.: 10.1007/978-1-4842-7945-8doiSubjects--Topical Terms:

189341
Java (Computer program language)

LC Class. No.: QA76.9.A25 / T55 2022

Dewey Class. No.: 005.8

The definitive guide to security in Jakarta EEsecuring Java-based enterprise applications with Jakarta security, authorization, authentication and more /
LDR:03089nmm a2200325 a 4500 001 621721
003 DE-He213
005 20220413231804.0
006 m d
007 cr nn 008maaau
008 221121s2022 cau s 0 eng d
020 $a 9781484279458$q(electronic bk.)
020 $a 9781484279441$q(paper)
024 7 $a 10.1007/978-1-4842-7945-8 $2 doi
035 $a 978-1-4842-7945-8
040 $a GP $c GP
041 0 $a eng
050 4 $a QA76.9.A25 $b T55 2022
072 7 $a UMX $2 bicssc
072 7 $a COM051280 $2 bisacsh
072 7 $a UMX $2 thema
082 0 4 $a 005.8 $2 23
090 $a QA76.9.A25 $b T568 2022
100 1 $a Tijms, Arjan. $3 816569
245 1 4 $a The definitive guide to security in Jakarta EE $h [electronic resource] : $b securing Java-based enterprise applications with Jakarta security, authorization, authentication and more / $c by Arjan Tijms, Teo Bais, Werner Keil.
260 $a Berkeley, CA : $b Apress : $b Imprint: Apress, $c 2022.
300 $a xvii, 638 p. : $b ill. (some col.), digital ; $c 24 cm.
505 0 $a 1: Security History -- 2: Jakarta EE Foundations -- 3: Jakarta Authentication -- 4: Jakarta Authorization -- 5: Jakarta Security -- 6: Java SE Underpinnings -- 7: EE Implementations -- 8: MicroProfile JWT -- Appendix A: Spring Security -- Appendix B: Apache Shiro -- Appendix C: Identity Management.
520 $a Refer to this definitive and authoritative book to understand the Jakarta EE Security Spec, with Jakarta Authentication & Authorization as its underlying official foundation. Jakarta EE Security implementations are discussed, such as Soteria and Open Liberty, along with the build-in modules and Jakarta EE Security third-party modules, such as Payara Yubikey & OIDC, and OmniFaces JWT-Auth. The book discusses Jakarta EE Security in relation to SE underpinnings and provides a detailed explanation of how client-cert authentication over HTTPS takes place, how certifications work, and how LDAP-like names are mapped to caller/user names. General (web) security best practices are presented, such as not storing passwords in plaintext, using HTTPS, sanitizing inputs to DB queries, encoding output, and explanations of various (web) attacks and common vulnerabilities are included. Practical examples of securing applications discuss common needs such as letting users explicitly log in, sign up, verify email safely, explicitly log in to access protected pages, and go direct to the log in page. Common issues are covered such as abandoning an authentication dialog halfway and later accessing protected pages again. What You Will Learn Know what Jakarta/Java EE security includes and how to get started learning and using this technology for today's and tomorrow's enterprise Java applications Secure applications: traditional server-side web apps built with JSF (Faces) as well as applications based on client-side frameworks (such as Angular) and JAX-RS Work with the daunting number of security APIs in Jakarta EE Understand how EE security evolved.
650 0 $a Java (Computer program language) $3 189341
650 0 $a Computer security. $3 184416
650 0 $a Cloud computing. $3 378527
650 0 $a Application software $x Development. $3 189413
650 1 4 $a Java. $3 763312
650 2 4 $a Programming Language. $3 913494
650 2 4 $a Data and Information Security. $3 913130
700 1 $a Bais, Teo. $3 923131
700 1 $a Keil, Werner. $3 923132
710 2 $a SpringerLink (Online service) $3 273601
773 0 $t Springer Nature eBook
856 4 0 $u https://doi.org/10.1007/978-1-4842-7945-8
950 $a Professional and Applied Computing (SpringerNature-12059)