Question

I have developed a web application on Struts2 and used JSP. I want to develop a login system and so cookie management for my web application. Everybody can see every page and there is no authorization for my website.

My question is that what are the steps of my work.

1) Login system

2) Cookie management

3) Authorization

will be done but where I should start and is there any good documents of that steps(for every step of what should I do)?

Answer 1

You can implement this using Sessions, which means you won’t have to work with cookies (at least directly). Also keep in mind the difference between authentication (checking identity of a user) and authorization (checking users access rights). I usually implement:

• a Login action (which authenticates the user in some way, and saves something to the session which I can latter check to see if the user is logged in…eg. a User object)
• an authorization interceptor (which filters each request and checks that user is logged in and has access rights for that particular request….if not forward to login form).

Also keep in mind that this is a do-it-yourself quick way to do it, if you plan anything more you are better off with a security framework/lib of some sorts.