java security servlet

Objective

• General: Protect application resources.

• Specific: Restrict servlet execution: Processaservlet only to authorized users. Request the authentication of credentials to release the protected resource.

Tools

• Java 8
• Apache Tomcat 8.5
• Intellij Idea 2021.3.2 (Ultimate Edition)

Procedures

• Users were defined with their respective passwords, already considering their type/level of access;

• Ask the user to insert their credentials;

Each server has its specific configuration mode, in this project it was considered for Apache Tomcat 8.5.

Configuring Authentication in Tomcat

• Go to the directory where the server files are located: C: Apache-Tomcat-8.5.76 Conf and access the file: Tomcat-users.xml for user and roller insertion.

Configuring Authentication in the Application

• Configure in the web.xml file according to the source code.