Security
by Sandra L. Emerson, Rob Woollen, Michael Girdley
J2EE™ Applications and BEA™ WebLogic Server™
- Copyright
- Foreword
- Preface
- Introduction
- Overview of J2EE Technologies
- WebLogic Server and J2EE
- J2EE Technologies Covered in this Book
- Presentation Logic
- Database and Transaction Support
- Object Registry and Remote Method Invocation (RMI)
- Enterprise JavaBeans (EJBs)
- Java Message Service (JMS)
- JavaMail
- Security
- WebLogic Server's Distributed Deployment Support
- About WebAuction
- Building Presentation Logic with WebLogic Server Servlets
- Using WebLogic Server JavaServer Pages
- About WebLogic Server JSPs
- JSP Basics
- The Lifecycle of a JSP
- JSP Page Elements
- Using Java Beans with JSPs
- Custom Tag Libraries
- Error Pages, Comments, and Deployment Descriptors
- Using Servlets and JSPs Together: Model View Controller
- Best Practices for Debugging and Developing JSPs
- Best Practices for JSPs
- JSPs in the WebAuction Application
- Browsing the WebAuction Code
- Using Databases and Transactions with JDBC and JTA
- Remote Method Invocation and Distributed Naming
- Enterprise Messaging with the Java Message Service (JMS)
- Using Session Enterprise JavaBeans
- Entity EJBs
- Rationale for Entity EJBs
- Entity Bean Basics
- CMP Entity Bean Example
- CMP
- Container-Managed Entity Bean Lifecycle
- Introduction to CMRs
- Writing EJB-QL for CMP Finders
- BMP Entity Beans
- Advanced Topics for Writing Entity EJBs
- Entity Bean Inheritance and Polymorphism
- Entity Beans and Locking
- Using Read-Only Entity Beans
- Session Beans as a Wrapper for Entity Beans
- Using Java Beans as Value Objects
- BMP vs. CMP
- Conclusion
- Using Message-Driven EJBs
- Interfacing with Internet Mail Using WebLogic Server JavaMail
- Developing Security with WebLogic Server JNDI and JAAS
- Security Technology Overview
- Creating Secure Web Applications
- Programming to the Caching Realm in Web Applications
- NewUser.jsp Example
- Developing Browser-Based Authentication
- Programmatic Security in Web Applications
- Developing Secure Application Clients
- Using WebLogic Server JNDI for Application Client Security
- About WebLogic SSL
- Web Clients: Using SSL Security
- Application Clients: Using SSL Security
- WebLogic Server Security Best Practices
- Putting It All Together
- Securing the WebAuction Application
- Designing the Production Deployment
- Designing for Deployment
- WebLogic Deployment Scenarios: Case Studies
- Types of Client Software
- Using a DMZ and Firewalls in a Web Deployment
- Integrating Web Deployments with Data Stores
- Using WebLogic Server Clustering in a Web Deployment
- Web Application Deployment Details
- Application Deployments
- Mixed Deployments
- Application Deployment Process
- Best Practices for Deploying WebLogic Server
- The WebAuction Application
- Application Architecture and Design: WebAuction
- Business Logic Design
- Changes Required for a Production Application
- Assembling the Application Components: WebAuction
- Quick Deployment of the WebAuction Application
- Deploying the WebAuction Application: In Detail
- Deploying the WebAuction on Another Database
- Testing the WebAuction Application
- Capacity Planning for the WebLogic Server
- Index
Security
The J2EE security model is still evolving. The Java Authentication and Authorization Service (JAAS) provides the framework for authenticating clients and authorizing differential access to application resources. Security technologies are discussed in Chapter 12.
-
No Comment
..................Content has been hidden....................
You can't read the all page of ebook, please click here login for view all page.