SpringOne 2GX 2011

Chicago, October 25-28, 2011

Magnificent Mile Marriott
Downtown Chicago
540 North Michigan Ave.
Chicago, Illinois   60611
1 (800) 228-9290
[ Map it ]

John Lewis

Core Developer of Spring Portlet MVC

John Lewis
John Lewis is the Chief Software Architect for Unicon Inc, the leading independent provider of open source training, consulting, and support in higher education. John is a 16 year veteran of the software engineering industry. His passions are large-scale enterprise architecture, open-source technologies, and agile software development methods. John has been working heavily in Java-based enterprise information portals since 2001 and is the lead developer of Spring Portlet MVC, which provides JSR 168 support in the Spring Framework. He is also active in several higher education open source communities, including uPortal and Sakai.

Presentations

Portlet Development with Spring

This session will survey the landscape for developing JSR 168 Portlets with Spring. Attendees will learn the options available for Portlet development today, with a strong focus on Spring MVC.

We'll begin by discussing the unique differences and challenges when developing Portlets instead of traditional Servlet webapps. Then we will review a number of web development frameworks with support for the JSR 168 Portlet 1.0 specification. We'll focus primarily on Spring MVC, but we will also talk about Spring Web Flow, Apache Portals Bridges, and several others.

Securing Portlets with Spring Security

In this session, attendees will learn how to secure JSR-168 Portlets using the latest version of Acegi Security, called Spring Security 2.0

The 2.0 release of Spring Security includes new support for JSR-168 Portlet development. In this session we'll cover how the Acegi security model translates into the Portlet world, show how to configure the authentication provider for JSR-168 Portlets, and discuss the special interceptors for processing Portlet requests and for storing the security context in the Portlet session. Finally we'll show how Portlets and Servlets in the same webapp can share security context, which allows for secure AJAX calls and dynamic images from within Portlets.