Which Java library should I use for authentication through Facebook, Gmail, local authentication, etc.?

Question

Which Java library do you recommend implementing authentication in a Java web application (servlets and JSPs only)? We want to offer the most common authentication providers (Facebook, Yahoo, Gmail, etc.), as well as a local account.

I found SocialAuth , but it looks pretty new and I don't know if there are any better alternatives. In addition, it looks like SocialAuth will request access to user contacts that I don’t need and can annoy our users.

Thanks!

Answer 1

You can check the new version of SocialAuth, and you can set the permission level that users will be given.

Answer 2

Spring Security is a good starting point for a flexible authentication system in your project.

http://static.springsource.org/spring-security/site/

There is a spring-security-facebook plugin that will integrate facebook authentication.

http://code.google.com/p/spring-security-facebook/

I am not sure about others. If you are talking about OpenID, then spring protection supports this.

Answer 3

I ended up using openid4java to integrate Google and Yahoo's OpenId, and simple HttpClient calls to integrate OAuth-based services (Facebook and Hotmail).