Security Framework for Java Swing Applications

Question

Is there a security Framework available for Java Desktop Applications? When I searched on google I saw persons talking about Spring Security, however it seems to be chiefly web-based. I have been using ordinary java code(Login forms, jdbc) to implement User Level security but I am not comfortable programming this way. Thanks for your assistance

Answer 1

I have decided to use Apache Shiro Security Framework. It is very easy to use and the website host good documentation. Thanks all for the help.

Answer 2

you can still use rolebased access and some sort of directory service for desktop applications and you could do that with spring it's not necessarily only for web access. not that i'm pushing spring specifically.

regards

Answer 3

It's hard to really answer you without knowing what threat model you're thinking of.

• Do you doubt that the signed in user has permission to open your application?
• Does the application talk to a server and get data from there?
• Are you concerned with the user tampering with code?

In the first case, this seems like something that is better handled with OS level permissions.

In the second case, handle your security on the server, you can't trust the client anyway.

In the third case, good luck.