How to properly authorize a user on servlet + jsp?

Question

Java

Hello.
How to correctly implement user authorization with division into roles (for example, admin \ user) in servlet + jsp?

Answer 1

1. Write a servlet that will check the identity of userName and password, for example from the database, and write the role.
2. Write a filter that will receive the role of an authorized user and prohibit the transition to any pages, to do any actions.
3. Make a jsp page that will use a servlet and send data!
PS Don't forget to register the servlet and filter in web.xml.
1.
2.
3.

Answer 2

1. Authorization by container means - JAAS
2. Spring - Spring Security
3. Spring Security + Active Directory