Gives the experienced Java programmer a firm understanding of web application development in the Java Enterprise environment. Students learn the Servlets, JSP, and JSTL standards and how to mesh them into an effective methodology for building maintainable model/view/controller web applications. Students also work with relational databases and are exposed to practicalities of using both JDBC- and JPA-based persistence tiers. The course also introduces security concepts and provides exercises in both declarative and programmatic approaches to authentication and authorization for Java web applications.
Goals
- Understand the value of web applications to an IT enterprise, and the importance of the Java EE platform in enabling web development.
- Build servlets to respond to HTTP requests.
- Build JavaServer Pages to define HTTP responses.
- Combine servlets and JSPs in a model/view/controller architecture to maximize efficiency and maintainability of application code.
- Define HTML forms and process form input.
- Store and retrieve information at request, session, and application scope.
- Make effective use of HTTP sessions as managed by the Java EE web container.
- Use the JSP Standard Tag Library to implement appropriate presentation logic in a JSP.
- Take full advantage of the relationship of servlets and JSPs to the Java EE web container using configuration, context, and lifecycle techniques.
- Manage persistent data from web applications by working with persistence tiers, JDBC, and/or JPA.
- Implement and configure servlet filters.
- Declare security policies for web applications, and use programmatic authorization where appropriate.
Outline
- Overview of Java EE Web Applications
- The World Wide Web
- HTTP
- HTML and XML
- CSS
- Dynamic Web Applications
- The Java EE Platform
- Java EE Servers and Portability
- Servlets
- JavaServer Pages
- JSTL
- Web Archives and Enterprise Archives
- Model/View/Controller
- Forms
- Sessions
- Context and Lifecycle
- Databases
- Security
- Filters
- JavaServer Faces
- Servlets
- The HTTP Message Model
- The Servlets API “Kernel”
- HttpServlet
- Request and Response Objects
- Mapping URLs
- Attributes and Scopes
- Forwarding and Redirecting
- JavaServer Pages
- Dynamic Web Pages
- Relationship to Servlets
- Directives
- The Unified Expression Language
- Page Scope
- Implicit Objects
- <jsp:useBean> and “Model 1”
- MVC and “Model 2”
- JSP Documents
- Working with Forms
- HTML Forms
- Submit Method: GET vs. POST
- Reading Single-Value Components
- Reading Multi-Value Components
- Reading Button Input
- Input Validation
- Sessions
- Sessions over HTTP
- HttpSession
- Session Scope
- Session Pitfalls
- The JSP Standard Tag Library
- Custom Tags
- The JSTL Libraries
- The Core Library
- Iterating Over Collections
- The Formatting Library
- Formatting Dates and Numbers
- Working with Maps
- Conditionals
- Loops
- Variables
- Importing Documents
- Custom Tags
- Custom Tag Libraries
- Tag Library Architecture
- Implementing in Java or JSP
- Correct Use of Scopes
- Invoking Presentation Logic
- Reusing Presentation Fragments
- Classic Tag Handlers
- Simple Tag Handlers
- Tag Files
- Context and Lifecycle
- Containers and Components
- Context and Lifecycle Interfaces
- Initialization and Context Parameters
- Loading Resources
- Lifecycle Methods
- Lifecycle Annotations
- Context Listeners
- JNDI and the Component Environment
- Dependency Injection
- Working with Databases
- Persistence Challenges
- Persistence Strategies
- JDBC
- DriverManager
- DataSource
- Data Access Objects
- JNDI Quirks and Portability Issues
- JPA
- Entity Annotations
- Entity Managers
- Persistence Units
- Working with Persistent Data
- Processing Tables
- Limiting Query Scope
- Filters
- Servlet Filters
- Uses for Filters
- Implementation
- Deployment
- Configuration and Context
- Security
- Threats to Enterprise IT
- Web Applications as Prime Targets
- Container Services
- Authentication for Web Applications
- Authorization
- HTTP BASIC Authentication
- HTTP DIGEST Authentication
- Declaring Security Constraints
- Abstract Roles, Concrete Realms
- Configuring User Realms
- Custom Error Pages
- Frustrations with BASIC and DIGEST
- Doing It Yourself
- FORM Authentication
- Programmatic Security
- Beyond Container-Based Security
- OWASP and the Top 10
To Hire an AMS Java Web Applications Subject Matter Expert and Instructor who also teaches this class, call us today at 800-798-3901!