Explore Java Enterprise security, focusing on authentication, authorization, and information security. Gain insights into encoding, encryption, and hashing. Discover OAuth2 and OpenID Connect integration techniques.

new.tar.gz

taskOne

tasktwo

taskthree

formPF

oauth2

openid

ldap

hashing

JWTHello

JWKManager

JwtAuthCode

demo

Challenge 1

Challenge2

Challenge3

simple-hash

hash-with-salt

PBKD

Challenge2-Faizan

Challenge3-Faizan

This course covers authentication and authorization within web applications in Java Enterprise security. Security is a vast concept with many aspects. In particular, we'll focus on the security of applications and the data they contain, an area that is known as information security.

We will start by identifying our end users and dive deep into the differences between encoding, encryption, and hashing techniques. After that, we will learn to propagate information with microservices architecture.

By the end of this course, you'll have hands-on experience with the integration and configuration of OAuth2 and OpenID Connect into the Java application.

JakartaEE Security Workshop

<project xmlns="http://maven.apache.org/POM/4.0.0" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
         xsi:schemaLocation="http://maven.apache.org/POM/4.0.0 http://maven.apache.org/xsd/maven-4.0.0.xsd">
    <modelVersion>4.0.0</modelVersion>
    <groupId>be.rubus.workshop.security</groupId>
    <artifactId>challenge2</artifactId>
    <version>1.0-SNAPSHOT</version>
    <packaging>war</packaging>

    <properties>
        <maven.compiler.source>11</maven.compiler.source>
        <maven.compiler.target>11</maven.compiler.target>
        <failOnMissingWebXml>false</failOnMissingWebXml>
    </properties>

    <dependencies>
        <dependency>
            <groupId>jakarta.platform</groupId>
            <artifactId>jakarta.jakartaee-web-api</artifactId>
            <version>8.0.0</version>
            <scope>provided</scope>
        </dependency>

        <dependency>
            <groupId>org.primefaces</groupId>
            <artifactId>primefaces</artifactId>
            <version>11.0.0</version>
        </dependency>
    </dependencies>
    <build>
        <finalName>challenge2</finalName>
    </build>

</project>

React

Dart

GoJS React

Typescript React

Vue.js

## Explanation
## `ApplicationConfiguration.java`

* **Lines 8–11:** We define the `@FormAuthenticationMechanismDefinition` on the class level with the configuration for form-based authentication.

* **Lines 12–15:** We define the `Database IdentityStore` by using the `DatabaseIdentityStoreDefinition` annotation. We need to use the members `callerQuery` and `groupsQuery` to define SQL queries and retrieve data from the database.

* **Lines 17 and 18:** We create a class `ApplicationConfiguration` and define it as a CDI bean so that configuration can be picked up by annotating the class with `@ApplicationScoped`.

## `DatabaseSetup.java`

* **Lines 18–20:** We create a class `DatabaseSetup` and define it as an EJB `Singleton` that will be initialized at the application `Startup` by adding the annotations on the class level.

* **Lines 22–26:** We use a reference to the `EntityManager` to perform database operations and `Pbkdf2PasswordHash` to generate hashes with the key derivation function.

* **Lines 28–43:** We create the `init` method to fill the database with some test data.

* **Lines 45–57:** We create two helper methods to create instances of the JPA entities we have defined.

Learn how to implement form-based authentication with PrimeFaces in this challenge.

Solution Review: Use Form-based Authentication With PrimeFaces

Before We Begin

Introduction

Concepts

Window Shopping

Authentication Methods

Standards

Authentication Data Stores

Secure Data Transfer

Solution Review: Use Form-based Authentication With PrimeFaces

Solution