Lesson - 03 : Web Security - Form Based Authentication

1. To apply security for a servlet or a jsp we have two approches 1. By the programmer 2. By the Container 2. Declarative Security Models 1. Basic Authentication 2. Digest Authentication 3. Form Based Authentication 4. Client Certificate Authentication Form Based Authentication: 1. Java services does not support digest authentication model. 2. Digest authentication model is almost equal to basic model but their internal algorithm different. 3. Basic model uses base64 encoding algorithm, but Digest model uses hashing algorithm(MD5). So digest model is more secure than basic model. 4. Form based authentication is also equal to basic authentication only, but in form based the container uses the html or jsp pages configured by the programmer to accept username and password and to display error message. 5. In form based authentication model the predefined servlet of server will accept the username and password from the login page. 7. While designing the login page we need to provide url pattern user name and password like the following a. url-pattern:j_security_check b. username:j_usrename c. password:j_password Sample Projects : ,

#