Java News from Tuesday, May 25, 2004

iPOV has posted jSai 0.7, an open source (Apache license) Servlet Authentication Implementation. based on J2SE + servlets. A J2EE application server is not required. jSai supports basic JDBC and XML backed user stores, as well as an LDAP user store. According to iPOV,

While there are several attempts to create authentication and authorization standards for J2EE applications, they tend to be overly complex; and more importantly have little support for providing information to an application. For instance, the security constraints specified for Servlet Containers allow security mappings that are potentially quite rich; but the only security information provided to a running servlet application is request.getUserPrincipal() and request.isUserInRole() - so in order to display menus based on user privalages the servlet/JSP writer needs to know the mapping of rolenames and users to security levels. Wounldn't it be much more logical to have a way to proactively check to see if a user will be able to access a web resource without needing to know the runtime configuration, a canAccess(user, url) method as it were? We think so. This enables system administrators to change security settings without needing to re-code application logic. You no longer need to choose between displaying a link to a site section that many users would not be authorized to view, or hardcoding in the restriction parameters.
jSai is implemented as a servlet Filter, a set of JSP Tags, and a supporting library (for servlets). Users, and group information can be stored in XML files, a JDBC accessable databases, or in LDAP. The JSP Tags as well as library calls enable web application developers to access important authentication information.

Rob Lougher has releeased JamVM 1.1.4, a free (GPL) Java Virtual Machine that "conforms to the JVM specification version 2 (blue book). In comparison to most other VM's (free and commercial) it is extremely small, with a stripped executable on PowerPC of only ~100K, and Intel 80K. However, unlike other small VMs (e.g. KVM) it is designed to support the full specification, and includes support for object finalisation, the Java Native Interface (JNI) and the Reflection API." Like most free VMs it relies on the Gnu Classpath library whic is upgraded to 0.0.9 in this release. 1.1.4 also adds the JNI enhancements introduced in Java 1.2. JamVM only interprets code. It does not have a Just-In-Time compiler.

Version 4.21b of SuperWaba, an open source Java virtual machine for handheld operating systems including PalmOS and Windows CE devices, has been released. This is a bug fix release. SuperWaba is published under the LGPL.

The Big Faceless Organization has released the Big Faceless PDF Library 2.2, a $400 payware (more if you want support) Java class library for creating PDF documents. The $1000 Extended Edition adds the AcroForms support, digital signatures, and the ability to import and edit and existing PDF documents. Version 2.2 reduces memory usage. Java 1.2 or later is required.

JCraft, Inc has posted JSch 0.1.15, a pure Java implementation of SSH2 that supports port forwarding, X11 forwarding, file transfer, etc. JSch is released under a BSD license. This release fixes bugs.

Dan Creswell has released version 2.0.7 of the Blitz JavaSpaces Server Edition abd version 0.8.1 of the pure Java edition. THese are both open source (BSD license) implementations of JavaSpaces that are Jini 2.0 enabled and implement smart indexing, tuneable persistence, and active/passive lease cleanup. These are bug fix releases.

Websina has released BugZero 3.6, a $999 payware Web-based bug tracking system that supports multiple projects, group-based access, automatic bug assignment, file attachment, email notification, and metric reports. Bug Zero is written in Java and can run on top of various backend databases including MySQL. 3.6 redesigns the web interface and provides an add-on component for reminders and escalations.

Teodor Danciu's posted version 0.5.3 of JasperReports, an open source Java library for generating reports from XML templates and customizable data sources (including JDBC). The output can be displayed on the screen, printed, or written to XML or PDF files. Version 0.5.3 fixes assorted bugs and adds support for astyled text and custom report variable calculation.

Bernhard Fastenrath has written a Java GetOpt Library (current version: 0.2) that parses command line options such as -d, --help and -version. The command line options and responses can be stored in XML.

Derrick Oswald has released the HTML parser 1.4.1, a free (LGPL) class library for parsing "real-world HTML."