I am building a website with J2EE (java ee 5). I need a Login Module which deals with user registration, login, logout, etc.
After searching for some articles regarding this on Google, I am simply lost.
Can I use the JAAS in JavaEE? One article says it does not provide functions for user registration and user management. But if JAAS can read user/password pairs from a database, then probably I can write my own registration module. However, I am not sure if JAAS can do it (please tell me). Also, if JAAS can only deal with the list of users created in the operating system or application server, then I don't see how it can be useful for me.
The login module that I am describing is obviously a recurring problem in web applications, so is there any java blueprints describing it? (all i can find is some lengthy documents talking about security, authentication and authorization)
I have then come across JOSSO... is it popular? does it support Sun Java System Application Server?