JSecurity

This is a very simple useless example to demonstrate how JSecurity works. I was struggling to understand the work flow and the terminology of any security framework. However, I finally got it, or I think I did.

Also, since the documentation of this project is still in its early stages I decided to post what I learned so that everyone can get a brief understanding of how everything fit together

Please let me know if I got anything wrong in this or any suggestion of how it could be better.

Thanks.

Here it goes:

import org.jsecurity.authc.AuthenticationException;
import org.jsecurity.authc.UsernamePasswordToken;
import org.jsecurity.mgt.DefaultSecurityManager;
import org.jsecurity.realm.text.TextConfigurationRealm;
import org.jsecurity.subject.Subject;


public class securityTEST
{
public static void main(String[] args)
{
//Create the realm in this case its just a simple text based realm
TextConfigurationRealm textConfigurationRealm = new TextConfigurationRealm();
//Set the user principals and roles
//format: username = password, role1, role2,...
textConfigurationRealm.setUserDefinitions("admin=admin,role1");
//Set the role permissions. (not required)
//format: rolename = permissionDefinition1, permissionDefinition2, ...
textConfigurationRealm.setRoleDefinitions("role1=permission1");
//Initialize the realm
textConfigurationRealm.init();
//Create the SecurityManager
DefaultSecurityManager securityManager =
new DefaultSecurityManager(textConfigurationRealm);
//and initialize it
securityManager.init();
//Create a username/password token
UsernamePasswordToken token =
new UsernamePasswordToken("admin", "admin");


//Ready to login now
try
{
Subject user = securityManager.login(token);
if (user.hasRole("role1"))
{
secureMethod1();
}
if (user.hasRole("role2"))
{
secureMethod2();
}
if (user.isPermitted("permission1"))
{
secureMethod3();
}
user.logout();
}
catch (AuthenticationException e)
{
System.out.println("Wrong username/password combination");
}
finally
{
//Clean up
securityManager.destroy();
}
}


private static void secureMethod1()
{
System.out.println("Secure method 1 called...");
}


private static void secureMethod2()
{
System.out.println("Secure method 2 called...");
}


private static void secureMethod3()
{
System.out.println("Secure method 3 called...");
}
}