我试图使用JDBC领域创建一个登录页面但是没有用。
我的步骤:
- 创建数据库,用户和组表
- 创建连接池和数据源,自定义领域。
- 添加安全角色映射,登录约束,安全约束和 安全角色。
- 创建登录jsp和登录servlet
醇>
我可以在创建期间ping连接池。
执行上述任务需要的最小配置是什么?
我的代码:
create table login
(
username varchar(128) NOT NULL CONSTRAINT usernamePk primary key,
password varchar(128) NOT NULL
);
insert into Login values('peterwkc', '1234');
create table grouptable
(
username varchar(128) NOT NULL,
groupid varchar(128) NOT NULL,
CONSTRAINT GROUP_PK PRIMARY KEY(username, groupid),
CONSTRAINT USER_FK FOREIGN KEY(username) REFERENCES Login (username)
ON DELETE CASCADE ON UPDATE RESTRICT
);
的web.xml
<?xml version="1.0" encoding="UTF-8"?>
<web-app version="3.0" xmlns="http://java.sun.com/xml/ns/javaee" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://java.sun.com/xml/ns/javaee http://java.sun.com/xml/ns/javaee/web-app_3_0.xsd">
<context-param>
<param-name>javax.faces.PROJECT_STAGE</param-name>
<param-value>Development</param-value>
</context-param>
<servlet>
<servlet-name>Faces Servlet</servlet-name>
<servlet-class>javax.faces.webapp.FacesServlet</servlet-class>
<load-on-startup>1</load-on-startup>
</servlet>
<servlet-mapping>
<servlet-name>Faces Servlet</servlet-name>
<url-pattern>/faces/*</url-pattern>
</servlet-mapping>
<session-config>
<session-timeout>
30
</session-timeout>
</session-config>
<welcome-file-list>
<welcome-file>faces/Login.jsp</welcome-file>
</welcome-file-list>
<security-constraint>
<display-name>LoginConstraint</display-name>
<web-resource-collection>
<web-resource-name>MyResource</web-resource-name>
<description/>
<url-pattern>/LoginController</url-pattern>
</web-resource-collection>
<auth-constraint>
<description/>
<role-name>User</role-name>
</auth-constraint>
</security-constraint>
<login-config>
<auth-method>FORM</auth-method>
<realm-name>Login</realm-name>
<form-login-config>
<form-login-page>/Login.jsp</form-login-page>
<form-error-page>/Error.jsp</form-error-page>
</form-login-config>
</login-config>
<security-role>
<description/>
<role-name>User</role-name>
</security-role>
<security-role>
<description/>
<role-name>Admin</role-name>
</security-role>
</web-app>
的glassfish-web.xml中
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE glassfish-web-app PUBLIC "-//GlassFish.org//DTD GlassFish Application Server 3.1 Servlet 3.0//EN" "http://glassfish.org/dtds/glassfish-web-app_3_0-1.dtd">
<glassfish-web-app error-url="">
<context-root>/JDBC_Realm</context-root>
<security-role-mapping>
<role-name>User</role-name>
<group-name>User</group-name>
</security-role-mapping>
<security-role-mapping>
<role-name>Admin</role-name>
<principal-name>peterwkc</principal-name>
</security-role-mapping>
<class-loader delegate="true"/>
<jsp-config>
<property name="keepgenerated" value="true">
<description>Keep a copy of the generated servlet class' java code.</description>
</property>
</jsp-config>
</glassfish-web-app>
Login.jsp:
<%@page contentType="text/html" pageEncoding="UTF-8"%>
<%@taglib prefix="f" uri="http://java.sun.com/jsf/core"%>
<%@taglib prefix="h" uri="http://java.sun.com/jsf/html"%>
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN"
"http://www.w3.org/TR/html4/loose.dtd">
<%--
This file is an entry point for JavaServer Faces application.
--%>
<f:view>
<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8"/>
<title>JSP Page</title>
</head>
<body>
<h1><h:outputText value="JavaServer Faces"/></h1>
<form action="LoginController" method="POST" id="LoginForm" name="LoginForm">
Username : <input type="text" name="username" /><p></p>
Password : <input type="password" name="password" />
<input type="submit" name="submit" value="Login"/>
</form>
</body>
</html>
</f:view>
LoginController.java:
@WebServlet(name = "LoginController", urlPatterns = {"/LoginController"})
public class LoginController extends HttpServlet {
@Override
public void init() throws ServletException {
getServletConfig();
}
@Override
public void destroy() {
}
/**
* Processes requests for both HTTP <code>GET</code> and <code>POST</code> methods.
* @param request servlet request
* @param response servlet response
* @throws ServletException if a servlet-specific error occurs
* @throws IOException if an I/O error occurs
*/
protected void processRequest(HttpServletRequest request, HttpServletResponse response)
throws ServletException, IOException {
response.setContentType("text/html;charset=UTF-8");
PrintWriter out = response.getWriter();
try {
/* TODO output your page here
out.println("<html>");
out.println("<head>");
out.println("<title>Servlet LoginController</title>");
out.println("</head>");
out.println("<body>");
out.println("<h1>Servlet LoginController at " + request.getContextPath () + "</h1>");
out.println("</body>");
out.println("</html>");
*/
} finally {
out.close();
}
}
// <editor-fold defaultstate="collapsed" desc="HttpServlet methods. Click on the + sign on the left to edit the code.">
/**
* Handles the HTTP <code>GET</code> method.
* @param request servlet request
* @param response servlet response
* @throws ServletException if a servlet-specific error occurs
* @throws IOException if an I/O error occurs
*/
@Override
protected void doGet(HttpServletRequest request, HttpServletResponse response)
throws ServletException, IOException {
// processRequest(request, response);
PrintWriter out = null;
try {
response.setContentType("text/html;charset=UTF-8");
out = response.getWriter();
} finally {
out.close();
}
}
/**
* Handles the HTTP <code>POST</code> method.
* @param request servlet request
* @param response servlet response
* @throws ServletException if a servlet-specific error occurs
* @throws IOException if an I/O error occurs
*/
@Override
protected void doPost(HttpServletRequest request, HttpServletResponse response)
throws ServletException, IOException {
processRequest(request, response);
}
/**
* Returns a short description of the servlet.
* @return a String containing servlet description
*/
@Override
public String getServletInfo() {
return "Short description";
}// </editor-fold>
}
我遵循本教程。 http://blog.gamatam.com/2009/11/jdbc-realm-setup-with-glassfish-v3.html
问题: 1.为什么我的代码不起作用?
请帮忙。 谢谢。
答案 0 :(得分:2)
如果您遵循本教程,Glassfish希望在usertable
中找到密码的MD5哈希值。但是您插入了1234
。您将需要插入1234
的MD5哈希值:81dc9bdb52d04dc20036dbd8313ed055
或者您可以告诉Glassfish使用普通密码,但我不知道在Digest
中放入什么
HTH
修改强>
在教程中,域名是security
,但在您的web.xml中,它名为Login
编辑2
还有更多错误:
要使用Glassfish的自动登录机制,Login.jsp中的表单应为action="j_security_check"
,用户和密码的名称应分别为j_username
和j_password
。
另请参阅Matt Handy的回答和评论,并提供更多详细信息(例如错误消息等)。否则,如果您只是说“它不起作用”,则很难提供帮助
答案 1 :(得分:1)
配置jdbc领域有点棘手。您在问题中提供了大量信息,但您错过了描述错误行为的信息。
一些想法:
你有一个组表,但是它包含行(peterwkc,User)吗?
您存储了密码的哈希值吗?
您的JDBC领域配置如何?
如果您将安全模块的日志记录设置为最佳,那么 server.log 中的内容是什么?
答案 2 :(得分:0)
检查一下,因为我已经解析地回答了你的问题(可能在里面出现了小错误):
JDBC Realm Form Authentication How To