Java EE / JAAS Night Terrors
Working with JavaEE 5 brings up a lot of new challenges when developing an enterprise level web app. The first issue I noticed is the absolute lack of experience for those in the job market when it comes to EJB3 and JavaEE 5.
But lately, I too am struggling to figure out the right way to put these "standardised" Java technologies into play. So far it's like inviting the school bully and his cronies to your back yard 12th birthday party, as well as the lame/runt kids, and trying to get them all to play Pinochle and not fighting.
The past few weeks it's been the JAAS struggle. Open source frameworks like jGuard might be able to help me, but the end result is that my architecture is a bit too complicated.
The real problem is with regards to web services, specifically trusted services. The SOAP client takes on a JAAS role, but based on other session information will assume another user/role. It's a headache and there's very little on Google.
I'll follow up on this later.