Ask HN: Web framework, written in a typed language, auth out of the box?

1 pointsohgh1ieD9y ago4 comments

Don't suggest me Spring Boot, asp.net mvc or the Play Framework.

Don't ask me why I want a statically typed language and also don't try to argue about it please.

I don't want to think about auth, I just want to plug it in and it works out of the box but in case that I have to change something, it should be quite easy to make the changes without lots of pain.

thank you

4 comments

3 comments · 1 top-level

niftich9y ago· 2 in thread

If you don't want to think about auth, you're basically looking for a CMS.

All traditional web frameworks make you plug in your actual authentication store, though most obviously provide some notion of access control or permissions.

ohgh1ieDOP9y ago

Well ok, it can be an easy to handle module for the web framework.

The ideal example would be Rails devise[0]

It just works without wasting too much time.

[0] https://github.com/plataformatec/devise

niftich9y ago

In the Java world, the two modern, main authn/authz frameworks are Spring Security [1] and Shiro [2]. Shiro is vastly easier to learn and apply.

Wicket [3] is a decent Java web framework that you can use together with Shiro; in the past there was a deeper integration [4]. Tapestry is another web framework that offers native integration [5].

[1] http://projects.spring.io/spring-security/

[2] http://shiro.apache.org/index.html

[3] http://wicket.apache.org/

[4] https://github.com/55minutes/fiftyfive-wicket

[5] https://tapestry.apache.org/security.html

1 more reply

j / k navigate · click thread line to collapse