jGuard v0.80 beta2 released!
the jGuard team is pleased to announce a new 'experimental' release(v0.80 beta1) of the java security library called jGuard(http://www.jguard.net).
this library is build on top of jaas, for J2EE web applications.
his goal is to provide for webapp developers, an easy way to manage authentication and authorizations.
enhancements since the last 'stable' release (v0.70):
- add some user-roles management functions to the jGuardExample webapp
- fix bug on logoff action
=> thanks to jacksosa!
- fix bug with a trailing '?' in the uri
=> thanks to hiberbear!
- fix a bug on domain creation
=> thanks to Alireza Fattahi!
-fix a bug on CLIENT_CERT authentication
=> thanks to Filippo Guerzoni!
- add auto-ddl and auto insert data for database backend on the authentication part
- add JCaptcha integration
- add database backend for registration process
- reorganise sources
- support multiple authentication schemes at the same time
=> thanks to Filippo Guerzoni!
- enhance CLIENT-CERT authentication
- more unit tests have been written for a better Quality of Service
- digest password mechanism and salt have been refactored (not used by default)
the main jGuard features are :
- clean separation of concerns: authentications are defined by the server administrator and
and authorizations are defined by webapp developers
- relies only on java 1.4 and j2ee 1.3 or higher
- can be adapted on any webapp, on any application server
- does not depend on a web framework, or an AOP framework
- build on top of the very secure and flexible JAAS(http://java.sun.com/products/jaas/)
- authentications and authorizations are handled by pluggable mechanisms
- changes take effects 'on the fly' (dynamic configuration)
- each webapp has its own authentications and authorizations configuration
- authentications can be configured through XML or databases (Oracle, MySQL,PostgreSQL,DB2,SQL Server)
- support encryption in authentication
- authorizations can be configured through XML or databases(Oracle, MySQL,PostgreSQL,DB2,SQL Server)
- a taglib is provided to protect jsp fragment
- support security manager
a webapp example(called 'jGuardExample') is provided to quickly test jGuard (via Xml configuration files, or Database).
you can find
documentation is provided under the doc/jguard.sourceforge.net/ directory (look at the index.html file with your browser).
this project is released under the LGPL licence.
every users and project members are welcomed!
the jGuard web site:
http://www.jguard.net
the jGuard homePage on sourceforge:
http://sourceforge.net/projects/jguard/
jGuard forums are open:
http://sourceforge.net/forum/?group_id=107276
2 mailing-list are provided:
- jguard-announce@lists.sourceforge.net
- jguard-users@lists.sourceforge.net
easy JAAS integration for j2ee has gone!
Charles GAY(jGuard team).