Package ml.alternet.security.web

Handle safe passwords on a Web environment, meaning that in the Web processing chain, a password NEVER appear as a String (unsafe) inside the Web container.

See: Description

Interface Summary

Interface	Description
Config	Define configuration properties for Web applications.

Class Summary

Class	Description
PasswordConverterProvider	JAX-RS provider that converts a form parameter or a header parameter to a secure password (query parameter are not handled by this converter since it would be a security flaw to send a password in the URI).
PasswordParam	Represent a non empty sequence of passwords.
Passwords	Handle safe passwords on a Web environment, meaning that in the Web processing chain, a password NEVER appear as a String inside the system.

Package ml.alternet.security.web Description

Handle safe passwords on a Web environment, meaning that in the Web processing chain, a password NEVER appear as a String (unsafe) inside the Web container.

An additional requirement for the Web container is that once extracted from the incoming data stream, the clear password have to be unset.

This package focus on handling the passwords inside a Web application (servlet-based applications as well as RESTful (JAX-RS) applications). It doesn't supply means for the Web container to capture the received passwords.

Please refer to Alternet Security subprojects to configure your servlet container to make this feature available.

See Also:

Passwords, PasswordParam