title: Is there any way to restrict access to web resources without using web.xml in a Java web app?
body: <p>I want to give access to some of the resources in my web application to the logged-in users only. I implemented the authentication without using any j_security_check as I find it very rigid and non-transparent. I want to know if there is any clean way of restricting access to the web resources without being dependent on the web.xml(security-constraint and web-resource-collection elements).</p>
  
  <p>Also, I do not want to use any bloated frameworks such as Spring or such.</p>