Question

I’m currently working on a (relatively) basic web application that functions as a time clock for a fictional employer. Currently, the application implements HTML, JavaScript, Java, MySQL, the Spring Framework and xml. I have a log in page, and it takes the user input for the Username and Password and stores the information. The problem is, I can’t seem to figure out how to take that information and compare it with the MYSQL database to successfully log in. I can post examples of code, if necessary and thanks in advance for the assistance.

This is a piece of the LoginController:

@RequestMapping(value = "/jsp/login")
public ModelAndView existUser(HttpServletRequest request) {
    return new ModelAndView("UserPrint.jsp", hashmap.makeHashMap());
}

@RequestMapping(value = "userLogin")
public ModelAndView loginUser(HttpServletRequest request,
        HttpSession session) {
    String strLoginJsp = "login.jsp";
    String strSessionErrorAttribute = "errors";
    User sessionUser = getUserFromSession(session);

    if (request.getHeader("referer") == null
            || request.getHeader("referer").contains("AddNewUser.html")) {
        session.setAttribute(SESSION_USER_ATTRIBUTE, new User());
        session.setAttribute(strSessionErrorAttribute, "");
        return new ModelAndView(strLoginJsp, hashmap.makeHashMap());
    }

    User requestUser = new User();
    String requestedUserName = request.getParameter("userName");
    requestUser.setUserName(requestedUserName);
    String requestedPassword = request.getParameter("password");
    requestUser.setPassword(requestedPassword);
    session.setAttribute(strSessionErrorAttribute, "");

    // Check if username and password is in DB
    User loginUser = userDao.login(requestUser);

    if (loginUser == null) {
        // Either the username doesn't exist, or the password was bad.
        if (userDao.userNameExist(requestedUserName)) {
            // user entered bad password
            if (sessionUser.getUserName() != null
                    && sessionUser.getUserName().equals(
                            requestUser.getUserName())) {
            } else {
                sessionUser.setUserName(requestUser.getUserName());
            }

        }
    } else {// username does not exist in db
        session.setAttribute(strSessionErrorAttribute,
                "Please register account.");

Here’s a piece of the UserDao:

    @SuppressWarnings("unchecked")
@Transactional
public List<User> getAllUsers() {
    Query query = em.createNamedQuery("fetchAllUsers");
    return query.getResultList();
}

public User login(User user) {
    Query query = em.createNamedQuery("userLogin");
    query.setParameter("userName", user.getUserName());
    query.setParameter("password", user.getPassword());

    List<User> currentUsers = query.getResultList();

    if (currentUsers.size() > 0) {
        return (User) currentUsers.get(0);
    }

    return null;
}

@SuppressWarnings("unchecked")
@Transactional
public Boolean userNameExist(String userName) {
    Query query = em.createNamedQuery("getUserWithUsername");
    query.setParameter("userName", userName);
    List<User> existUser = query.getResultList();

    if (existUser.size() > 0) {
        return true;
    }
    return false;
}

Answer 1

Yes, please, post some code.
What exactly is the issue?

On the most basic level you should be able to:

1. pass the username and password as parameters in the HttpServletRequest object
2. Retrieve said parameters by “name” from the HSR object in the Controller.
3. Pass them to the SQL query for comparison against the database field.

Which of the above steps failed?