This session will survey the landscape for developing JSR 168 Portlets with Spring. Attendees will learn the options available for Portlet development today, with a strong focus on Spring MVC.
We'll begin by discussing the unique differences and challenges when developing Portlets instead of traditional Servlet webapps. Then we will review a number of web development frameworks with support for the JSR 168 Portlet 1.0 specification. We'll focus primarily on Spring MVC, but we will also talk about Spring Web Flow, Apache Portals Bridges, and several others.
In this session, attendees will learn how to secure JSR-168 Portlets using the latest version of Acegi Security, called Spring Security 2.0
The 2.0 release of Spring Security includes new support for JSR-168 Portlet development. In this session we'll cover how the Acegi security model translates into the Portlet world, show how to configure the authentication provider for JSR-168 Portlets, and discuss the special interceptors for processing Portlet requests and for storing the security context in the Portlet session. Finally we'll show how Portlets and Servlets in the same webapp can share security context, which allows for secure AJAX calls and dynamic images from within Portlets.