问题描述
我正在寻找 Java Web 应用程序中用于身份验证/用户登录管理/安全性的框架/解决方案，它们可以使初级开发人员的工作更轻松/更快，并使应用程序相对更安全地抵御潜在威胁.
I am looking for frameworks/solution for authentication/ user-login management/ security in java web application that can make the naive developer's job easier/faster and make the application relatively more secured against potential threats.
因为有些人建议我考虑像 Spring Security & 这样的解决方案.Apache Shiro，我想知道 JSF 2.0 怎么样.在我的案例中使用 Shrino 而不是 Spring 安全性有什么缺点吗?
As some people have suggested me to consider solutions like Spring Security & Apache Shiro, I wanted to know how does it go with JSF 2.0.Are there any downsides of using Shrino over Spring security for my case?
对于 JSF 应用程序，还有其他更好的安全解决方案吗?
Any other better security solutions for JSF applications ?
目前我在我的网络应用程序中使用 JSF 2.0(带 Facelets)作为前端开发框架它由 NoSQL 数据库 Cassandra 提供支持.
Currently I'm using JSF 2.0(with Facelets) as the front-end development framework in my web application & it is backed by Cassandra, a NoSQL database.
推荐答案
Deluan Quintão 为 Shiro 和 JSF 提供了很好的解决方案，得到了 Shiro 社区的好评:
Deluan Quintão has provided a good solution for Shiro and JSF that has been received well by the Shiro community:
http://techbeats.deluan.com/apache-shiro-tags-for-jsffacelets
另请注意，Shiro 可以使用 Cassandra 作为后端来启用 Servlet 容器无关的会话集群(您需要编写一个 CassandraSessionDAO 并将其插入 Shiro 的配置中).请参阅 http://shiro.apache.org/session-management.html 了解更多信息.
Also note that Shiro can use Cassandra as a back-end to enable Servlet container-independent session clustering (You will need to write a CassandraSessionDAO and plug it in to Shiro's configuration). See http://shiro.apache.org/session-management.html for more.
这篇关于Apache Shiro“使用 JSF 2.0"！进展如何?的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持！