Scribd Logo
Upload

Welcome to Scribd!

  • 96 views

    Web Services Basic Security-RAGHU

    Uploaded by

    Learning Online Classes
    This document discusses implementing basic authentication for web services using Java and Jersey. It includes code for a UserValidator filter class that reads the Authorization header, decodes the basic authentication credentials, and checks the username and password. It also shows an AppConfig class that registers the filter, and a sample PaymentRestController with a GET endpoint.

    Copyright:

    © All Rights Reserved
    Download as PDF, TXT or read online from Scribd

    Web Services Basic Security-RAGHU

    Uploaded by

    Learning Online Classes
    96 views5 pages
    This document discusses implementing basic authentication for web services using Java and Jersey. It includes code for a UserValidator filter class that reads the Authorization header, decodes the basic authentication credentials, and checks the username and password. It also shows an AppConfig class that registers the filter, and a sample PaymentRestController with a GET endpoint.

    Original Title

    Web services Basic Security-RAGHU

    Copyright

    © © All Rights Reserved

    Available Formats

    PDF, TXT or read online from Scribd

    Did you find this document useful?

    Is this content inappropriate?

    This document discusses implementing basic authentication for web services using Java and Jersey. It includes code for a UserValidator filter class that reads the Authorization header, decodes the basic authentication credentials, and checks the username and password. It also shows an AppConfig class that registers the filter, and a sample PaymentRestController with a GET endpoint.

    Copyright:

    © All Rights Reserved
    Download as PDF, TXT or read online from Scribd
    Download as pdf or txt
    96 views5 pages

    Web Services Basic Security-RAGHU

    Uploaded by

    Learning Online Classes
    This document discusses implementing basic authentication for web services using Java and Jersey. It includes code for a UserValidator filter class that reads the Authorization header, decodes the basic authentication credentials, and checks the username and password. It also shows an AppConfig class that registers the filter, and a sample PaymentRestController with a GET endpoint.

    Copyright:

    © All Rights Reserved
    Download as PDF, TXT or read online from Scribd
    Download as pdf or txt
    of 5

    by RAGHU SIR[NARESH IT, HYD]

    Web services Basic Security -PART-1


    FB:
    https://www.facebook.com/groups/thejavatemple/

    Page 1 of 5
    by RAGHU SIR[NARESH IT, HYD]

    Filter code:
    package in.nit.validator;

    import java.io.IOException;

    Page 2 of 5
    by RAGHU SIR[NARESH IT, HYD]

    import java.util.Base64;
    import java.util.List;
    import java.util.StringTokenizer;

    import javax.ws.rs.container.ContainerRequestContext;
    import javax.ws.rs.container.ContainerRequestFilter;
    import javax.ws.rs.core.Context;
    import javax.ws.rs.core.HttpHeaders;
    import javax.ws.rs.core.Response;
    import javax.ws.rs.core.Response.Status;

    public class UserValidator


    implements ContainerRequestFilter
    {
    @Context // read object from container
    private HttpHeaders headers;

    @Override
    public void filter(ContainerRequestContext req) throws
    IOException {
    //1. read header param
    List<String>
    authList=headers.getRequestHeader("Authorization");
    //if null or empty stop request processing
    //return with 400 Response
    if(authList==null || authList.isEmpty()) {
    req.abortWith(
    Response.status(Status.BAD_REQUEST)
    .entity("No Auth Data is provided")
    .build()
    );
    return;
    }else { //if Header Param exist
    String auth=authList.get(0);
    //--remove basic space
    auth=auth.replaceAll("Basic ", "");
    //-- decode data--
    byte[]
    arr=Base64.getDecoder().decode(auth.getBytes());
    //--convert to String--
    auth=new String(arr);

    //******************************
    // Tokenize data
    //****************************
    StringTokenizer str=new StringTokenizer(auth,":");

    Page 3 of 5
    by RAGHU SIR[NARESH IT, HYD]

    String user=str.nextToken();
    String pwd=str.nextToken();

    //return 401-Unauthorized response


    if(!("admin".equals(user) && "nit".equals(pwd))) {
    req.abortWith(
    Response.status(Status.UNAUTHORIZED)
    .entity("Invaild user/pwd")
    .build()
    );
    return;
    }

    AppConfig
    package in.nit.config;

    import javax.ws.rs.ApplicationPath;

    import org.glassfish.jersey.server.ResourceConfig;

    import in.nit.validator.UserValidator;

    @ApplicationPath("/rest")
    public class AppConfig
    extends ResourceConfig
    {

    public AppConfig() {
    packages("in.nit");
    //register filter
    register(UserValidator.class);
    }
    }

    PaymentRestController
    Page 4 of 5
    by RAGHU SIR[NARESH IT, HYD]

    package in.nit.controller;

    import javax.ws.rs.GET;
    import javax.ws.rs.Path;

    @Path("/payment")
    public class PaymentRestController {

    @GET
    @Path("/payAmt")
    public String doBillPay() {
    return "PAYMENT IS DONE";
    }
    }

    pom.xml

    <properties>
    <failOnMissingWebXml>false</failOnMissingWebXml>
    <maven.compiler.source>13</maven.compiler.source>
    <maven.compiler.target>13</maven.compiler.target>
    </properties>
    <dependencies>
    <dependency>
    <groupId>org.glassfish.jersey.containers</groupId>
    <artifactId>jersey-container-servlet</artifactId>
    <version>2.30</version>
    </dependency>
    <dependency>
    <groupId>org.glassfish.jersey.inject</groupId>
    <artifactId>jersey-hk2</artifactId>
    <version>2.30</version>
    </dependency>
    </dependencies>

    Page 5 of 5

    You might also like