Security plays an important role in Jakarta EE applications. This stems from the fact that communication with the outside world is an integral part of a server application, be it web access for JSF or REST applications, web services, remotely accessible EJBs, an email interface, and so on.
But it is also important to avoid someone’s breaking into your system because the administrative interfaces of the Jakarta EE8 server (Glassfish in our case) are not protected, or the database or the JMS provider is not secured. In this chapter, we will talk about both security realms—application ...
