Differences

This shows you the differences between two versions of the page.

Link to this comparison view

java:new-app [06/03/2015 13:57]
Anthony Arents [Custom Authentication Entry Point] 		java:new-app [04/10/2017 11:37] (current)
Anthony Arents [New Java Web Applications]
Line 1: Line 1:
 ====== New Java Web Applications ====== ====== New Java Web Applications ======
 +
 +End of life December 2016.
  
 If you are making a company project : If you are making a company project :
Line 14: Line 16:
   * Tomcat 7   * Tomcat 7
   * Use Java 7 for compiling, I recommend Java 8 for running tomcat (no permgen errors) ;-).   * Use Java 7 for compiling, I recommend Java 8 for running tomcat (no permgen errors) ;-).
 +
 +Tomcat settings \\ 
 +<code>-Xmx2048m -Xms512m -XX:MaxPermSize=768m -Dcom.sun.xml.ws.transport.http.client.HttpTransportPipe.dump=true</code>
  
 ====== Package structure : ====== ====== Package structure : ======
Line 438: Line 443:
 ===== web.xml : ===== ===== web.xml : =====
  
-Now we need the following in our ''WEB-INF/web.xml''+Now we need the following in our ''WEB-INF/web.xml'' \\  
 +Remove Spring Security if you are not using it!
  
 <code xml><?xml version="1.0" encoding="UTF-8"?> <code xml><?xml version="1.0" encoding="UTF-8"?>
Line 1295: Line 1301:
     </bean>     </bean>
          
-    <bean id="loginController" class="de.jcpis.analyse.presentation.LoginController">+    <bean id="loginController" class="be.mentoringsystems.applicationname.presentation.LoginController">
         <property name="methodNameResolver" ref="paramResolver" />         <property name="methodNameResolver" ref="paramResolver" />
         <property name="loginService" ref="loginService" />         <property name="loginService" ref="loginService" />
 +    </bean>
 +
 +    <bean id="indexController" class="org.springframework.web.servlet.mvc.ParameterizableViewController">
 +        <property name="viewName" value="app" />
     </bean>     </bean>
  
     <bean id="urlFileViewer" class="org.springframework.web.servlet.mvc.UrlFilenameViewController"></bean>     <bean id="urlFileViewer" class="org.springframework.web.servlet.mvc.UrlFilenameViewController"></bean>
 +
 +    <bean id="jspViewResolver"
 +   class="org.springframework.web.servlet.view.InternalResourceViewResolver">
 + <property name="prefix" value="/WEB-INF/jsp/"/>
 + <property name="suffix" value=".jsp" />
 +    </bean>
  
     <bean id="urlMapping" class="org.springframework.web.servlet.handler.SimpleUrlHandlerMapping">     <bean id="urlMapping" class="org.springframework.web.servlet.handler.SimpleUrlHandlerMapping">
Line 1306: Line 1322:
         <property name="mappings">         <property name="mappings">
             <props>             <props>
-                <prop key="/login.html">loginController</prop> 
                 <prop key="/login.json">loginController</prop>                 <prop key="/login.json">loginController</prop>
 +                <prop key="/">indexController</prop>
             </props>             </props>
         </property>         </property>
Line 1316: Line 1332:
 </code> </code>
  
 +====== JSP Pages ======
 +===== Login =====
 +
 +Add ''login.jsp'' to ''/WEB-INF/jsp'' \\ 
 +
 +<code xml>
 +<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
 +   "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
 +<html xmlns="http://www.w3.org/1999/xhtml">
 +    <head>
 +        <meta http-equiv="Content-Type" content="text/html; charset=UTF-8" />
 +        <title>Login</title>
 +        <link type="text/css" rel="stylesheet" href="static/styles/login.css" />
 +    </head>
 +    <body class="loginPage">
 +<div id="page">
 +<div id="login">
 +    <div id="logincontent">
 +     <h1 id="login-title">Login</h1>
 +        <form action="j_spring_security_check" method="post" id="login-form">
 +        
 +                <div>
 +                    <label for="username">Username :</label>
 +                    <input type='text' id="username" tabindex="1" name='j_username' />
 +                </div>
 +                <div>
 +                    <label for="password">Password :</label>
 +                    <input id="password" tabindex="2" type='password' name='j_password' />
 +                </div>
 +                <div class="submitbtn">
 +     <input type="submit" tabindex="4" value="Login" class="loginButton" />
 +                </div>
 +        </form>
 +</div></div>
 +    </body>
 +</html>
 +</code>
 +
 +You are free to change the implementation of the loginpage, \\ 
 +you'll find it easier to rely on an old fashioned form submit to login a user, the system will then redirect to app.html (app.jsp)
 +===== App =====
 +
 +Add ''app.jsp'' to ''/WEB-INF/jsp'' \\ 
 +
 +this should be the index.html of your extjs application
 +====== Static resources (javascript, css, ...) ======
 +
 +Don'y use html pages, use jsp like above.
 +simply place the resource in ''/static/'' or any subfolder there
 ====== Spring Security ====== ====== Spring Security ======
  
Line 1464: Line 1529:
 We want a json message telling us we need to login when we do an AJAX request. else spring will redirect to the loginpage & our application will break without telling why. (not needed when polling the server) We want a json message telling us we need to login when we do an AJAX request. else spring will redirect to the loginpage & our application will break without telling why. (not needed when polling the server)
  
-===== Custom Access Denied Handler =====+==== Custom Access Denied Handler ====
  
 <code java>package be.mentoringsystems.security; <code java>package be.mentoringsystems.security;
Line 1532: Line 1597:
 }</code> }</code>
  
-==== Custom Access Denied Handler ==== 
- 
-<code java>package be.mentoringsystems.applicationname.security; 
- 
-import java.io.IOException; 
-import javax.servlet.ServletException; 
-import javax.servlet.http.HttpServletRequest; 
-import javax.servlet.http.HttpServletResponse; 
-import org.springframework.security.access.AccessDeniedException; 
-import org.springframework.security.web.access.AccessDeniedHandlerImpl; 
-import org.springframework.security.web.context.SaveContextOnUpdateOrErrorResponseWrapper; 
- 
-/** 
- * 
- * @author anthonyarents 
- */ 
-public class CustomAccessDeniedHandler extends AccessDeniedHandlerImpl { 
- 
-    @Override 
-    public void handle(HttpServletRequest request, HttpServletResponse response, AccessDeniedException accessDeniedException) throws IOException, ServletException { 
-        final String jsonHeader = request.getHeader("X-Requested-With"); 
- 
-        if (jsonHeader != null) { 
-            response.setStatus(SaveContextOnUpdateOrErrorResponseWrapper.SC_UNAUTHORIZED); 
-            response.setHeader("Location", null); 
-            response.setContentType("application/json;charset=UTF-8"); 
-            response.getOutputStream().print("{\"success\" : false, \"data\" : [], \"error\" : \"LOGIN REQUIRED\"}"); 
-        } else { 
-            super.handle(request, response, accessDeniedException); 
-        } 
-    } 
-} 
-</code> 
  
 ===== applicationname-security.xml ===== ===== applicationname-security.xml =====
Line 1584: Line 1616:
         <security:intercept-url pattern="/ws/**" filters="none" />         <security:intercept-url pattern="/ws/**" filters="none" />
         <security:intercept-url pattern="/login.html" filters="none" />         <security:intercept-url pattern="/login.html" filters="none" />
-        <security:intercept-url pattern="/j_spring_security_switch_user" filters="ROLE_ADMIN" />+        <security:intercept-url pattern="/j_spring_security_switch_user" access="ROLE_ADMIN" />
         <!-- useful if we need app.html to also be available for anonymous users -->         <!-- useful if we need app.html to also be available for anonymous users -->
         <!--security:intercept-url pattern="/app.html" access="ROLE_ANONYMOUS, ROLE_USER" /-->         <!--security:intercept-url pattern="/app.html" access="ROLE_ANONYMOUS, ROLE_USER" /-->