So far the business logic, data access layer and the front controllers had been build, however enforcing authentication was completely missing.

Last time I added username and password based authentication with using Spring Security.