Document Information

Preface

Part I Introduction

1. Overview

2. Using the Tutorial Examples

Part II The Web Tier

3. Getting Started with Web Applications

4. Java Servlet Technology

5. JavaServer Pages Technology

6. JavaServer Pages Documents

7. JavaServer Pages Standard Tag Library

8. Custom Tags in JSP Pages

9. Scripting in JSP Pages

10. JavaServer Faces Technology

11. Using JavaServer Faces Technology in JSP Pages

12. Developing with JavaServer Faces Technology

13. Creating Custom UI Components

14. Configuring JavaServer Faces Applications

15. Internationalizing and Localizing Web Applications

Part III Web Services

16. Building Web Services with JAX-WS

17. Binding between XML Schema and Java Classes

18. Streaming API for XML

19. SOAP with Attachments API for Java

Part IV Enterprise Beans

20. Enterprise Beans

21. Getting Started with Enterprise Beans

22. Session Bean Examples

23. A Message-Driven Bean Example

Part V Persistence

24. Introduction to the Java Persistence API

25. Persistence in the Web Tier

26. Persistence in the EJB Tier

27. The Java Persistence Query Language

Part VI Services

28. Introduction to Security in the Java EE Platform

Overview of Java EE Security

A Simple Security Example

Step 1: Initial Request

Step 2: Initial Authentication

Step 3: URL Authorization

Step 4: Fulfilling the Original Request

Step 5: Invoking Enterprise Bean Business Methods

Security Functions

Characteristics of Application Security

Security Implementation Mechanisms

Java SE Security Implementation Mechanisms

Java EE Security Implementation Mechanisms

Application-Layer Security

Transport-Layer Security

Message-Layer Security

Securing Containers

Using Deployment Descriptors for Declarative Security

Using Annotations

Using Programmatic Security

Securing the Application Server

Working with Realms, Users, Groups, and Roles

What Are Realms, Users, Groups, and Roles?

Some Other Terminology

Managing Users and Groups on the Application Server

Adding Users to the Application Server

Adding Users to the Certificate Realm

Setting Up Security Roles

Mapping Roles to Users and Groups

Establishing a Secure Connection Using SSL

Installing and Configuring SSL Support

Specifying a Secure Connection in Your Application Deployment Descriptor

Verifying SSL Support

Tips on Running SSL

Working with Digital Certificates

Creating a Server Certificate

Signing Digital Certificates

Using a Different Server Certificate with the Application Server

Miscellaneous Commands for Certificates

Enabling Mutual Authentication over SSL

Creating a Client Certificate for Mutual Authentication

Further Information about Security

29. Securing Java EE Applications

30. Securing Web Applications

31. The Java Message Service API

32. Java EE Examples Using the JMS API

33. Transactions

34. Resource Connections

35. Connector Architecture

Part VII Case Studies

36. The Coffee Break Application

37. The Duke's Bank Application

Part VIII Appendixes

A. Java Encoding Schemes

B. About the Authors

Index

The Java EE 5 Tutorial

Java Coffee Cup logo

Home | Download | PDF | FAQ | Feedback

Previous Contents Next

Further Information about Security

For more information about security in Java EE applications, see:

Java EE 5 Specification:

http://jcp.org/en/jsr/detail?id=244
EJB 3.0 Specification (JSR-220):

http://jcp.org/en/jsr/detail?id=220
Web Services for Java EE (JSR-109):

http://jcp.org/en/jsr/detail?id=109
Java Platform, Standard Edition 6 security information:

http://download.oracle.com/javase/6/docs/technotes/guides/security/
Java Servlet Specification, Version 2.5:

http://jcp.org/en/jsr/detail?id=154
JSR 175: A Metadata Facility for the Java Programming Language:

http://jcp.org/en/jsr/detail?id=175
JSR 181: Web Services Metadata for the Java Platform:

http://jcp.org/en/jsr/detail?id=181
JSR 250: Common Annotations for the Java Platform:

http://jcp.org/en/jsr/detail?id=250
The Java SE discussion of annotations:

http://download.oracle.com/javase/6/docs/technotes/guides/language/annotations.html
The API specification for Java Authorization Contract for Containers:

http://jcp.org/en/jsr/detail?id=115
Chapter 24 of the CORBA/IIOP specification, Secure Interoperability:

http://www.omg.org/cgi-bin/doc?formal/02-06-60
Java Authentication and Authorization Service (JAAS) in Java Platform, Standard Edition:

http://java.sun.com/developer/technicalArticles/Security/jaasv2/index.html
Java Authentication and Authorization Service (JAAS) Reference Guide:

http://download.oracle.com/javase/6/docs/technotes/guides/security/jaas/JAASRefGuide.html
Java Authentication and Authorization Service (JAAS): LoginModule Developer’s Guide:

http://download.oracle.com/javase/6/docs/technotes/guides/security/jaas/JAASLMDevGuide.html

Previous Contents Next

Scripting on this page tracks web page traffic, but does not change the content in any way.