The AccessControlContext is a marker interface that is passed in to {@link AccessController#isAuthorized(ManagedResource, AccessControlContext)} and {

The AccessController interface defines a set of methods that can be used in a wide variety of applications to enforce access control. In most applicat

Authentication represents the Authentication Context for the current request. It is meant to serve as an abstraction layer between the authentication

The Authenticator interface defines a set of methods for generating and handling account credentials and session identifiers. The goal of this interfa

The Encoder interface provides an API for contextually output encoding untrusted data. // TODO: Provide lots more documentation here on using the new

The basic functionality of the EncodingContext is to encode a single character to it's correct format for the current Context. For example, if this im

EnterpriseSecurityException is the base class for all security related exceptions. You should pass in the root cause exception where possible. Constru

This is a very basic generic implementation of the SecurityEvent interface that can be used for the {@link SecurityLogger} to provide a very simple PA

This is the very basic interface that all Security Control implementations should implement. It is expected that each control/component will have a UU

SecurityEvent represents an the result of an action that generates a result that is contextual to application security. An example of such an event co

The SecurityLogger interface replaces the Logger interface from ESAPI 2.x. The SecurityLogger is intended to be used to log security specific events,

The Validator interface defines a set of methods for validating untrusted input. Validators can be used to validate simple or complex data-types depen