在进行管理员登录的情况下，如何在Java servlet的web.xml中提供安全凭证，又如何从JSP管理员登录页面进行验证？

Question

Am Creating a Java Web application where User can register themselves and could login to the application.

But in case of Admin, credentials should already be available and could not be registered from Web page. How the credentials like username and password be provided in web.xml of Servlets? and how the credentials are validated from LoginServlet, once the username and password is submitted by admin in JSP and passed to the LoginServlet?

Answer 1

i think you should first understand container managed security..

For tomcat there is a good example here: http://www.informit.com/articles/article.aspx?p=24253

and then you could (in case of tomcat) configure your own realm (jdbc, etc...):

https://tomcat.apache.org/tomcat-7.0-doc/realm-howto.html

and

https://tomcat.apache.org/tomcat-7.0-doc/security-howto.html

this link is also useful in case of Java EE: http://docs.oracle.com/javaee/6/tutorial/doc/bncat.html