Clojure and the Web

[Ari King]

From the table of contents of Clojure Programming I noticed there is a section on "the Web". However, I was not able to discern if security -- authentication/authorization -- is covered. Are these topics covered in the book? If not, could you kindly suggestion some other resources? Thanks.

-Ari

[Chas Emerick]

No, the web programming chapter in the book does not cover authentication and authorization.

For some years, I've used spring-security to cover this aspect of things in my Clojure web apps; if you already know it, that's a good place to start.

I've personally been frustrated with spring-security in a variety of areas though, which is why I've started a Clojure-specific authentication/authorization library called Friend. Clojure offers a number of facilities that have already made me far more productive with it than with spring-security, and I suspect it will only get better as time goes on.

--
(coauthor of Clojure Programming from O'Reilly; creator of Clojure Atlas)

[Dan King]

The web section does have a great explanation of Ring, which should help you in understanding how to integrate either your own security or a preexisting security library.