Get full access to Java EE 8 Development with Eclipse and 60K+ other titles, with a free 10-day trial of O'Reilly.

There are also live events, courses curated by job role, and more.

Securing servlets using annotations

So far, we have seen declarative syntax for specifying security constraints; that is, by specifying <security-constraint> in web.xml. However, security constraints can also be specified using Java annotations, specifically for servlets. In this section, we will create AdminServlet and secure it with annotations. Follow the steps in the previous section to import the CourseManagementJDBC project from Chapter09, but rename it CourseManagementJDBC-SecureAnnotations, and import it into the workspace. Then, add only <login-config> in web.xml, but do not specify <security-constraint>:

  <login-config>    <auth-method>FORM</auth-method>    <form-login-config>      <form-login-page>/login.jsp</form-login-page> <form-error-page>/login-error.jsp</form-error-page> ...

Get Java EE 8 Development with Eclipse now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.

Start your free trial

Don’t leave empty-handed

Get Mark Richards’s Software Architecture Patterns ebook to better understand how to design components—and how they should interact.

It’s yours, free.

Get it now

Check it out now on O’Reilly

Dive in for free with a 10-day trial of the O’Reilly learning platform—then explore all the other resources our members count on to build skills and solve problems every day.

Start your free trial Become a member now