I'm creating my first Spring MVC app on Tomcat 6. Certain pages will be browseable by all and other pages will be restricted to registered users. I'm looking for advice on how best to configure app security to support this. Coming from ASP.NET, which provides Login Controls that provide registration/login/password recovery/etc components, I'm wondering whether Spring MVC has equivalent functionality. Since this is common functionality, I'm hoping there are some reusable components that I can leverage so that I don't have to write all of this from scratch.
This is basically a small toy app so I don't need super-duper security. I'm looking for components that will make writing web user authentication/authorization easier (or how to leverage built-in Tomcat capabilities). I'm fairly new to Java web development so any suggestions on how to quickly build this functionality would be appreciated.
Thanks.