This paper explains how to use the Java Authentication and Authorization
API (JAAS). It plugs JAAS into the Struts framework. Though this paper focuses
on Struts, and in particular the example application distributed with Struts,
the lessons learned should be applicable to any MVC web framework.
The first half of this article gives an overview of Java's security
model. The second half focuses on one aspect of that security model: the safety
features built into the Java virtual machine.