Resin has a comprehensive security framework for application authentication, authorization and transport level SSL based security. Authentication capabilities include built-in support for security data stored in XML files, the database, JAAS, LDAP or properties files, HTTP basic authentication, form based authentication and HTTP password digests. The authorization features include traditional role based security as well as robust conditionals based-on cookies, HTTP headers, locale, IP address and the like. The security framework also supports single sign-on shared across multiple web applications.

The following are details on the authenticators that can be used with Resin, along with example code to utilize as a starting point for your applications:

The following are details on the login managers that can be used with Resin, along with example code to utilize as a starting point for your applications:

Resin supports SSL for both HTTP transport level encryption as well as server authentication. Both Apache OpenSSL and JSSE are supported as SSL implementations.