JavaPassion: June 2017

SpringSecurity4,Primefaces5,SpringDataJPA and Hibernate4 Java Configuration User Registration Application Using Eclipse Neon IDE and MySQL Database Server

This simple application is a User Registration application operating on ‘user’ and ‘role’ tables in ‘dbbusiness’ database in MySQL Database Server. It is a SpringSecurity, SpringDataJPA, Hibernate-annotation and Spring-Java Configuration based application.

To integrate Maven to the project pom.xml is provided at the end.

For Spring.Hibernate and SpringDataJPA CRUD Please look at the blog post at below URL

https://raichand-java.blogspot.in/2017/02/springsecurity4primefaces5springdatajpa.html

Security is of critical importance to all web applications. Vulnerable applications are easy prey for hackers. Spring Security is a Java/Java EE framework that provides authentication, authorization and other security features for java language based enterprise applications. It is operating system independent, works on various kinds of operating system. On 1^st September 2016 the latest stable version of spring -Security is 4.1.3.Spring- Security version 4.1.3 is used in this application.

· Spring Security Features

1. Comprehensive and extensible support for both Authentication and Authorization.

2. Protection against attacks like session fixation, clickjacking, cross site request forgery (CSRF) etc.

3. Servlet API integration.

4. Optional integration with Spring MVC and supports more frameworks.

This is a web security (User Registration,Login, Logout and Remember me) application operating on ‘user’ and ‘role’ tables in ‘dbbusiness’ database in MySQL Database Server. It is a Hibernate-Annotation and Spring-Java Configuration application. Different persons with different authorization (e.g. user or admin) displayed different web pages after logging in based on authorization.

Steps of Authentication mechanism

1. User submits their credentials to the system; that is, a username and password.

2. org.springframework.security.authentication.

UsernamePasswordAuthenticationToken accepts the credentials and passes them to org.springframework.security.authentication.AuthenticationManager for validation.

3. System authenticates the user.

4. Credential flows as follows: UsernamePasswordAuthenticationTokenà

AuthenticationManager à Authentication.

5. Finally a fully loaded authentication instance is returned.

6. SecurityContextHolder accepts the authentication instance.

7. The system also checks for authorization of roles or groups.

8. Finally, the user is allowed to access the system based on his authorization.

Software Used

1.JDK8u25

2.Eclipse Neon and apache tomcat can be downloaded when installing

3.MySQL 5.* Database Server(or XAMPP-For easy MySQL Management)

4.MySQL Connector 5.*

5.Hibernate 4.3.** and Primefaces 5.*

6.Spring4.3.8

7.Spring Security 4.1.3

Steps

1.Install JDK8 or Jdk7 if not installed

2.Install Eclipse Neon and associated ApacheTomcat Server after downloading

3.Install MySQL Database server or XAMPP(For easy management of MySQL ) .

After Installing Eclipse click the Data Source Explorer tab at the bottom.Right click Database Connection->New. Create new MySQL Database Server Connection. Put ‘dbbusiness’ as the database. As shown below. Put password if you have given password at the time of installation of MySQL database server. For XAMPP no password is required. Then test connection. If successful click finish button.

Then Disconnect from database.

Create database ‘dbbusiness’.

Create ‘user’ and ‘role’ table by running below SQL in ‘dbbusiness’ database .

CREATE TABLE IF NOT EXISTS `user` (

`user_id` int(10) unsigned NOT NULL,

`first_name` varchar(50) NOT NULL,

`last_name` varchar(50) NOT NULL,

`email` varchar(50) NOT NULL,

`user_name` varchar(50) NOT NULL,

`password` varchar(100) NOT NULL,

`enabled` tinyint(1) DEFAULT NULL

) ENGINE=InnoDB DEFAULT CHARSET=utf8;

ALTER TABLE `user`

ADD PRIMARY KEY (`user_id`);

CREATE TABLE IF NOT EXISTS `role` (

`role_id` int(10) unsigned NOT NULL,

`user_id` int(10) unsigned NOT NULL,

`role` varchar(45) NOT NULL

) ENGINE=InnoDB DEFAULT CHARSET=utf8;

ALTER TABLE `role`

ADD PRIMARY KEY (`role_id`), ADD KEY `user_id` (`user_id`);

ALTER TABLE `role`

ADD CONSTRAINT `role_ibfk_1` FOREIGN KEY (`user_id`) REFERENCES `user` (`user_id`);

To insert records execute following SQL

INSERT INTO `user` (`user_id`, `first_name`, `last_name`, `email`, `user_name`, `password`, `enabled`) VALUES

(1, 'Kate', 'Morton', 'kate123@gmail.com', 'kate', '$2a$10$niwmCfG7XiV455YZ1550je7qmQ/AjyYc1McxAcr8LRsUBlJzUwWB6', 1),

(2, 'Alex', 'Perry', 'alex123@yahoo.com', 'alex', '$2a$10$nka18qu7p/uaZd82BV32auRs2Pdi7Cx1rstd08JGuuKp535XfIa1y', 1);

INSERT INTO `role` (`role_id`, `user_id`, `role`) VALUES

(1, 1, 'ROLE_ADMIN'),

(2, 2, 'ROLE_USER');

pom.xml

<groupId>MavenPrimefacesSpringSecurityHibernateUserRegistration_JavaConfig</groupId>

<artifactId>com.raywebsites</artifactId>

<version>0.0.1-SNAPSHOT</version>

<name>EmployeeManager</name>

<groupId>javax.inject</groupId>

<artifactId>javax.inject</artifactId>

</dependency>

<groupId>org.jboss</groupId>

<artifactId>jandex</artifactId>

<version>2.0.3.Final</version>

</dependency>

<groupId>aopalliance</groupId>

<artifactId>aopalliance</artifactId>

</dependency>

<groupId>org.springframework</groupId>

<artifactId>spring-aop</artifactId>