Cargando…

The definitive guide to security in Jakarta EE : securing Java-based enterprise applications with Jakarta security, authorization, authentication and more /

Refer to this definitive and authoritative book to understand the Jakarta EE Security Spec, with Jakarta Authentication & Authorization as its underlying official foundation. Jakarta EE Security implementations are discussed, such as Soteria and Open Liberty, along with the build-in modules and...

Descripción completa

Detalles Bibliográficos
Clasificación:Libro Electrónico
Autores principales: Tijms, Arjan (Autor), Bais, Teo (Autor), Keil, Werner (Autor)
Formato: Electrónico eBook
Idioma:Inglés
Publicado: New York, NY : Apress, [2022]
Temas:
Acceso en línea:Texto completo (Requiere registro previo con correo institucional)

MARC

LEADER 00000cam a2200000Ii 4500
001 OR_on1311402417
003 OCoLC
005 20231017213018.0
006 m o d
007 cr un|---aucuu
008 220419s2022 nyua o 001 0 eng d
040 |a ORMDA  |b eng  |e rda  |e pn  |c ORMDA  |d EBLCP  |d GW5XE  |d YDX  |d OCLCO  |d YDX  |d OCLCF  |d N$T  |d UKAHL  |d OCLCQ  |d VLB  |d DCT  |d OCLCO 
019 |a 1311332792  |a 1311358858  |a 1311463816  |a 1311571117  |a 1324248086 
020 |a 9781484279458  |q (electronic bk.) 
020 |a 148427945X  |q (electronic bk.) 
020 |z 1484279441 
020 |z 9781484279441 
024 7 |a 10.1007/978-1-4842-7945-8  |2 doi 
029 1 |a AU@  |b 000071547115 
035 |a (OCoLC)1311402417  |z (OCoLC)1311332792  |z (OCoLC)1311358858  |z (OCoLC)1311463816  |z (OCoLC)1311571117  |z (OCoLC)1324248086 
037 |a 9781484279458  |b O'Reilly Media 
050 4 |a QA76.9.A25  |b T55 2022eb 
072 7 |a COM051280  |2 bisacsh 
082 0 4 |a 005.8  |2 23 
049 |a UAMI 
100 1 |a Tijms, Arjan,  |e author. 
245 1 4 |a The definitive guide to security in Jakarta EE :  |b securing Java-based enterprise applications with Jakarta security, authorization, authentication and more /  |c Arjan Tijms, Teo Bais, Werner Keil. 
264 1 |a New York, NY :  |b Apress,  |c [2022] 
264 4 |c ©2022 
300 |a 1 online resource (xvii, 638 pages : color illustrations) 
336 |a text  |b txt  |2 rdacontent 
337 |a computer  |b c  |2 rdamedia 
338 |a online resource  |b cr  |2 rdacarrier 
347 |a text file  |b PDF  |2 rda 
500 |a Includes index. 
520 |a Refer to this definitive and authoritative book to understand the Jakarta EE Security Spec, with Jakarta Authentication & Authorization as its underlying official foundation. Jakarta EE Security implementations are discussed, such as Soteria and Open Liberty, along with the build-in modules and Jakarta EE Security third-party modules, such as Payara Yubikey & OIDC, and OmniFaces JWT-Auth. The book discusses Jakarta EE Security in relation to SE underpinnings and provides a detailed explanation of how client-cert authentication over HTTPS takes place, how certifications work, and how LDAP-like names are mapped to caller/user names. General (web) security best practices are presented, such as not storing passwords in plaintext, using HTTPS, sanitizing inputs to DB queries, encoding output, and explanations of various (web) attacks and common vulnerabilities are included. Practical examples of securing applications discuss common needs such as letting users explicitly log in, sign up, verify email safely, explicitly log in to access protected pages, and go direct to the log in page. Common issues are covered such as abandoning an authentication dialog halfway and later accessing protected pages again. What You Will Learn Know what Jakarta/Java EE security includes and how to get started learning and using this technology for today's and tomorrow's enterprise Java applications Secure applications: traditional server-side web apps built with JSF (Faces) as well as applications based on client-side frameworks (such as Angular) and JAX-RS Work with the daunting number of security APIs in Jakarta EE Understand how EE security evolved Who This Book Is For Java developers using Jakarta EE and writing applications that need to be secured (every application). Basic knowledge of Servlets and CDI is assumed. Library writers and component providers who wish to provide additional authentication mechanisms for Jakarta EE also will find the book useful. 
505 0 0 |t Security History --  |t Jakarta EE Foundations --  |t Jakarta Authentication --  |t Jakarta security --  |t Java SE underpinnings --  |t Jakarta EE Implementations --  |t MicroProfile JWT. 
590 |a O'Reilly  |b O'Reilly Online Learning: Academic/Public Library Edition 
650 0 |a Java (Computer program language) 
650 0 |a Computer security. 
650 0 |a Cloud computing. 
650 0 |a Application software  |x Development. 
650 2 |a Computer Security 
650 6 |a Java (Langage de programmation) 
650 6 |a Sécurité informatique. 
650 6 |a Infonuagique. 
650 6 |a Logiciels d'application  |x Développement. 
650 7 |a Data protection  |2 fast 
650 7 |a Java (Computer program language)  |2 fast 
650 7 |a Programming languages (Electronic computers)  |2 fast 
700 1 |a Bais, Teo,  |e author. 
700 1 |a Keil, Werner,  |e author. 
776 0 8 |i Print version:  |a Tijms, Arjan  |t The Definitive Guide to Security in Jakarta EE  |d Berkeley, CA : Apress L. P.,c2022  |z 9781484279441 
856 4 0 |u https://learning.oreilly.com/library/view/~/9781484279458/?ar  |z Texto completo (Requiere registro previo con correo institucional) 
938 |a Askews and Holts Library Services  |b ASKH  |n AH40339132 
938 |a ProQuest Ebook Central  |b EBLB  |n EBL6953180 
938 |a YBP Library Services  |b YANK  |n 17913540 
938 |a EBSCOhost  |b EBSC  |n 3265340 
994 |a 92  |b IZTAP