Custom User Management for Google App Engine Java

Question

I am using GAE Java for a multi-user application. There are multiple users with different roles. Each user can login, do some operations and logout. The business restricts me from using Google User Service and I need to implement my own for authentication and session management.

Can anyone please share with me how should I go about implementing my own user management? I have read its very tricky to implement own user management. Any pointers in terms of best approaches/ design / existing frameworks if any ?

I could see some similar posts but they are for python.

Answer 1

Well, for the production quality authentication and security I finally decided using "Spring-Security". Seems to be the best solution if you are using spring in your application and you can do customizations at finest levels.