java 用户管理最佳实践/库/框架？
声明：本页面是StackOverFlow热门问题的中英对照翻译，遵循CC BY-SA 4.0协议，如果您需要使用它，必须同样遵循CC BY-SA许可，注明原文地址和作者信息，同时你必须将它归于原作者（不是我）：StackOverFlow
原文地址: http://stackoverflow.com/questions/7854649/
Warning: these are provided under cc-by-sa 4.0 license. You are free to use/share it, But you must attribute it to the original authors (not me):
StackOverFlow
User management best practice/library/framework?
提问by Hyman Gibson
I'm currtenly working on the backend logic of a java project.
我目前正在研究 Java 项目的后端逻辑。
Frontend (GWT) will follow soon and business logic might be deployed in a J2EE container (maybe Spring) to handle some life-cycle issues. However, I'm not sure if I will go for a container.
前端 (GWT) 将很快跟进，业务逻辑可能会部署在 J2EE 容器（可能是 Spring）中以处理一些生命周期问题。但是，我不确定我是否会选择一个容器。
I thought about putting some thinking into user/role management and authentification before I proceed. However, I'm having a hard time to find the right way, identifiy right libraries and best practices.
在继续之前，我考虑过对用户/角色管理和身份验证进行一些思考。但是，我很难找到正确的方法，确定正确的库和最佳实践。
The issue is that this will be more or less an enteprise app that might use existing user directories to authenticate (e.g. LDAP) or might be used also on the web for "public" access where users can sign up.
问题在于，这或多或少是一个企业应用程序，它可能使用现有用户目录进行身份验证（例如 LDAP），或者也可能在网络上用于用户可以注册的“公共”访问。
I'm also looking for a lightweight solution which is min. invasive (I guess Spring would be helpful here?!).
我也在寻找一个最小的轻量级解决方案。侵入性的（我猜 Spring 在这里会有所帮助？！）。
I'm thankfull for any input and experiences
我很感激任何意见和经验
采纳答案by Hyman Gibson
I ended up using Apache Shiro http://shiro.apache.org/
我最终使用了 Apache Shiro http://shiro.apache.org/
回答by socha23
Have you seen Spring Security? Runs under Spring, has LDAP integration, can be used with web access.
你见过Spring Security吗？在 Spring 下运行，具有 LDAP 集成，可用于 Web 访问。
回答by Eran Medan
Lift frameworkseems to have some sort of built-in user management support
Lift 框架似乎有某种内置的用户管理支持
