Question

I have mongodb base with users and passwords. I have a jsp file with a form for authorization.
filter should be check – authorized user or not. Servlet should authorize user if he not authorized.

Please give simple examples of how to do it.

• how to verify an authorized user or
  not?
• The user is not logged. Suppose a
  user is in the database. How it
  authorize?

sorry for bad english.

Answer 1

Here’s a scenario:-

1. User enters a secured page.
2. Filter intercepts user request.
3. Filter retrieves User object from session.
4. If User object exists, allow user to the secured page.
5. If User object doesn’t exist, redirect user to the login page.

When the user submits the credential from the login page:-

1. System authenticates user using the provided credential against the database.
2. If authentication is successful, system stores User object in the session and displays welcome page.
3. If authentication is not successful, system brings user back to the login page.