Alternatives to spring-security in Java (spring)

2020-02-26 06:06发布

问题:

I'm looking for a good security framework that allows to annotate parameter based access rules to methods.

Basicly i want to check if the authenticated user is allowed to call a certain method with a specific object as a parameter.

Spring security would serve my needs but because of this (spring forum) i'm looking for alternatives if i'm unable to get it to work.

Requirements:

  • method security based on config or annotations, i want to avoid puting my security code insite my service methods
  • rules are based on parameters of the methods, simple role based security is not enough
  • spring support out of the box is a plus

Any recommendations?

回答1:

Apache Shiro stands in competition to Spring Security. Is easier, covers more. See here.