Document Information

Preface

Part I Introduction

1.  Overview

2.  Using the Tutorial Examples

Part II The Web Tier

3.  Getting Started with Web Applications

4.  JavaServerTM Faces Technology

5.  Introduction to Facelets

6.  Unified Expression Language

7.  Using JavaServerTM Faces Technology in Web Pages

8.  Using Converters, Listeners and Validators

9.  Developing With JavaServerTM Faces Technology

10.  Java Servlet Technology

Part III Web Services

11.  Introduction to Web Services

12.  Building Web Services with JAX-WS

13.  Building RESTful Web Services with JAX-RS and Jersey

Part IV Enterprise Beans

14.  Enterprise Beans

15.  Getting Started with Enterprise Beans

16.  Running the Enterprise Bean Examples

Part V Contexts and Dependency Injection for the JavaTM EE Platform

17.  Introduction to Contexts and Dependency Injection for the JavaTM EE Platform

18.  Running the Basic Contexts and Dependency Injection Examples

Part VI Persistence

19.  Introduction to the Java Persistence API

20.  Running the Persistence Examples

21.  The Java Persistence Query Language

22.  Creating Queries Using the Criteria API

Part VII Security

23.  Introduction to Security in the Java EE Platform

24.  Getting Started Securing Enterprise Applications

25.  Getting Started Securing Web Applications

Part VIII JavaTM EE Supporting Technologies

26.  Introduction to JavaTM EE Supporting Technologies

27.  Transactions

28.  Resource Connections

Index

 

S

SAAJ, SOAP with Attachments API for Java
SASL, Java SE Security Implementation Mechanisms
schema, deployment descriptors, Using Deployment Descriptors for Declarative Security
schemagen tool, Tools
scopes, using, Using Scopes
secure connections
Establishing a Secure Connection Using SSL
Installing and Configuring SSL Support
Secure Socket Layer (SSL), Establishing a Secure Connection Using SSL
security, Overview of JAX-RS and Jersey: Further Information
annotations
Using Annotations
Securing Enterprise Beans
web applications, Overview of Web Application Security
application, Application-Layer Security
characteristics of, Characteristics of Application Security
application client tier
callback handlers, Using Login Modules
callback handlers
Securing Application Clients
Using Login Modules
clients, Securing Application Clients
constraints, Specifying Security Constraints
container, Overview of Java EE Security
container trust, Trust between Containers
containers, Securing Containers
context
enterprise beans, Accessing an Enterprise Bean Caller’s Security Context
declarative
Overview of Java EE Security
Using Deployment Descriptors for Declarative Security
Securing Enterprise Beans
Overview of Web Application Security
default principal, Accepting Unauthenticated Users
deploying enterprise beans, Deploying Secure Enterprise Beans
EIS applications, Securing Enterprise Information Systems (EIS) Applications
component-managed sign-on, Component-Managed Sign-On
container-managed sign-on, Container-Managed Sign-On
end-to-end, Message-Layer Security
enterprise beans, Securing Enterprise Beans
example, A Simple Security Example
functions, Security Functions
groups, What Is a Group?
implementation mechanisms, Security Implementation Mechanisms
introduction, Introduction to Security in the Java EE Platform
JAAS login modules, Using Login Modules
Java EE
mechanisms, Java EE Security Implementation Mechanisms
Java SE, Java SE Security Implementation Mechanisms
login forms, Securing Application Clients
login modules, Using Login Modules
mechanisms, Security Functions
message
Overview of Web Application Security
Using Message Security with Web Applications
message-layer, Message-Layer Security
method permissions, Securing an Enterprise Bean Using Declarative Security and Annotations
annotations, Specifying Authorized Users by Declaring Security Roles
policy domain, Some Other Terminology
programmatic
Overview of Java EE Security
Using Programmatic Security
Securing Enterprise Beans
Overview of Web Application Security
Using Programmatic Security with Web Applications
programmatic login, Securing the Enterprise Server
propagating identity, Propagating a Security Identity (Run-As)
realms, What Is a Realm?
resource adapter, Configuring Resource Adapter Security
role names
Specifying Authorized Users by Declaring Security Roles
Declaring Security Roles
roles
What Is a Role?
Setting Up Security Roles
Securing an Enterprise Bean Using Declarative Security and Annotations
Working with Security Roles
Declaring Security Roles
run-as identity, Propagating a Security Identity (Run-As)
single sign-on, Securing the Enterprise Server
specifying run-as identity, Propagating a Security Identity (Run-As)
transport-layer
Transport-Layer Security
Establishing a Secure Connection Using SSL
users
What Is a User?
Reviewing Security Concepts
web applications, Getting Started Securing Web Applications
deployment descriptor, Using Deployment Descriptors to Secure Web Applications
overview, Overview of Web Application Security
web components, Getting Started Securing Web Applications
web services, Getting Started Securing Web Applications
security constraint, Setting Up Security Roles
security-constraint element, Setting Up Security Roles
security constraints, Specifying Security Constraints
multiple, Specifying Separate Security Constraints for Different Resources
security domain, Some Other Terminology
security identity
propagating, Propagating a Security Identity (Run-As)
specific identity, Propagating a Security Identity (Run-As)
security-role-mapping element, Mapping Roles to Users and Groups
security-role-ref element, Declaring and Linking Role References
security roles
Setting Up Security Roles
Securing an Enterprise Bean Using Declarative Security and Annotations
Mapping Security Roles to Enterprise Server Groups
server, authentication, HTTPS Client Authentication
servers, certificates, Working with Digital Certificates
Servlet interface, What Is a Servlet?
ServletContext interface, Accessing the Web Context
ServletInputStream class, Getting Information from Requests
ServletOutputStream class, Constructing Responses
ServletRequest interface, Getting Information from Requests
ServletResponse interface, Constructing Responses
servlets, What Is a Servlet?
binary data
reading, Getting Information from Requests
writing, Constructing Responses
character data
reading, Getting Information from Requests
writing, Constructing Responses
compiling, Compiling, Packaging, and Running the converter Example
examples
Web Application Life Cycle
Creating the converter Web Client
finalization, Finalizing a Servlet
initialization, Initializing a Servlet
failure, Initializing a Servlet
life cycle, Servlet Life Cycle
life-cycle events
handling, Handling Servlet Life-Cycle Events
packaging, Compiling, Packaging, and Running the converter Example
service methods, Writing Service Methods
notifying, Notifying Methods to Shut Down
programming long running, Creating Polite Long-Running Methods
tracking service requests, Tracking Service Requests
session beans
Enterprise JavaBeans Technology
What Is a Session Bean?
activation, The Life Cycle of a Stateful Session Bean
clients, What Is a Session Bean?
databases, Synchronizing a Session Bean’s Instance Variables
examples, Coding the Enterprise Bean Class
passivation, The Life Cycle of a Stateful Session Bean
requirements, Session Bean Class
stateful
Stateful Session Beans
When to Use Session Beans
stateless
Stateless Session Beans
When to Use Session Beans
transactions
Container-Managed Transactions
Synchronizing a Session Bean’s Instance Variables
Bean-Managed Transactions
web services
Web Service Clients
Stateless Session Bean Implementation Class
sessions, Maintaining Client State
associating attributes, Associating Objects with a Session
associating with user, Session Tracking
invalidating, Session Management
notifying objects associated with, Notifying Objects That Are Associated with a Session
sign-on
component-managed
Securing Enterprise Information Systems (EIS) Applications
Component-Managed Sign-On
container-managed
Securing Enterprise Information Systems (EIS) Applications
Container-Managed Sign-On
Simple Authentication and Security Layer, Java SE Security Implementation Mechanisms
single sign-on, Securing the Enterprise Server
SingleThreadModel interface, Controlling Concurrent Access to Shared Resources
SOAP
Types of Web Services
Building Web Services with JAX-WS
Building Web Services with JAX-WS
Further Information about JAX-WS
SOAP messages, SOAP Transport Protocol
securing, Message-Layer Security
SOAP with Attachments API for Java, See SAAJ
SQL
Java Database Connectivity API
Queries That Navigate to Related Entities
Identifiers
Path Expressions
SQL92, NULL Values
SSL
Transport-Layer Security
Establishing a Secure Connection Using SSL
Specifying a Secure Connection
HTTPS Client Authentication
connector, Installing and Configuring SSL Support
connectors
Enterprise Server, Installing and Configuring SSL Support
specifying, Setting Up Security Roles
tips, Tips on Running SSL
verifying support, Verifying SSL Support
SSL HTTPS Connector, configuring, Installing and Configuring SSL Support
SSO, Securing the Enterprise Server
standard converters
Converter implementation classes, Using the Standard Converters
converter tags
Using Core Tags
Using Core Tags
Converting a Component’s Value
NumberConverter class, Using the Standard Converters
using, Using the Standard Converters
standard validators
using, Using the Standard Validators
validator tags
See validator tags
state fields, query language, Query Language Terminology
substitution parameters, defining, See messages, param tag