Class overview :

Class goals :

Understand the value of web applications to an IT enterprise, and the importance of the Java EE platform in enabling web development.
Build servlets to respond to HTTP requests.
Build JavaServer Pages to define HTTP responses.
Combine servlets and JSPs in a model/view/controller architecture to maximize efficiency and maintainability of application code.
Define HTML forms and process form input.
Store and retrieve information at request, session, and application scope.
Make effective use of HTTP sessions as managed by the Java EE web container.
Use the JSP Standard Tag Library to implement appropriate presentation logic in a JSP.
Take full advantage of the relationship of servlets and JSPs to the Java EE web container using configuration, context, and lifecycle techniques.
Manage persistent data from web applications by working with persistence tiers, JDBC, and/or JPA.
Implement and configure servlet filters.
Declare security policies for web applications, and use programmatic authorization where appropriate.

Content of Training Developing Java Web Applications

Class Outline

1. Overview of Java EE Web Applications
   1. The World Wide Web
   2. HTTP
   3. HTML and XML
   4. CSS
   5. Dynamic Web Applications
   6. The Java EE Platform
   7. Java EE Servers and Portability
   8. Servlets
   9. JavaServer Pages
   10. JSTL
   11. Web Archives and Enterprise Archives
   12. Model/View/Controller
   13. Forms
   14. Sessions
   15. Context and Lifecycle
   16. Databases
   17. Security
   18. Filters
   19. JavaServer Faces
2. Servlets
   1. The HTTP Message Model
   2. The Servlets API « Kernel »
   3. HttpServlet
   4. Request and Response Objects
   5. Mapping URLs
   6. Attributes and Scopes
   7. Forwarding and Redirecting
3. JavaServer Pages
   1. Dynamic Web Pages
   2. Relationship to Servlets
   3. Directives
   4. The Unified Expression Language
   5. Page Scope
   6. Implicit Objects
   7. <jsp:useBean> and « Model 1″
   8. MVC and « Model 2″
   9. JSP Documents
4. Working with Forms
   1. HTML Forms
   2. Submit Method: GET vs. POST
   3. Reading Single-Value Components
   4. Reading Multi-Value Components
   5. Reading Button Input
   6. Input Validation
5. Sessions
   1. Sessions over HTTP
   2. HttpSession
   3. Session Scope
   4. Session Pitfalls
6. The JSP Standard Tag Library
   1. Custom Tags
   2. The JSTL Libraries
   3. The Core Library
   4. Iterating Over Collections
   5. The Formatting Library
   6. Formatting Dates and Numbers
   7. Working with Maps
   8. Conditionals
   9. Loops
   10. Variables
   11. Importing Documents
7. Custom Tags
   1. Custom Tag Libraries
   2. Tag Library Architecture
   3. Implementing in Java or JSP
   4. Correct Use of Scopes
   5. Invoking Presentation Logic
   6. Reusing Presentation Fragments
   7. Classic Tag Handlers
   8. Simple Tag Handlers
   9. Tag Files
8. Context and Lifecycle
   1. Containers and Components
   2. Context and Lifecycle Interfaces
   3. Initialization and Context Parameters
   4. Loading Resources
   5. Lifecycle Methods
   6. Lifecycle Annotations
   7. Context Listeners
   8. JNDI and the Component Environment
   9. Dependency Injection
9. Working with Databases
   1. Persistence Challenges
   2. Persistence Strategies
   3. JDBC
   4. DriverManager
   5. DataSource
   6. Data Access Objects
   7. JNDI Quirks and Portability Issues
   8. JPA
   9. Entity Annotations
   10. Entity Managers
   11. Persistence Units
   12. Working with Persistent Data
   13. Processing Tables
   14. Limiting Query Scope
10. Filters
    1. Servlet Filters
    2. Uses for Filters
    3. Implementation
    4. Deployment
    5. Configuration and Context
11. Security
    1. Threats to Enterprise IT
    2. Web Applications as Prime Targets
    3. Container Services
    4. Authentication for Web Applications
    5. Authorization
    6. HTTP BASIC Authentication
    7. HTTP DIGEST Authentication
    8. Declaring Security Constraints
    9. Abstract Roles, Concrete Realms
    10. Configuring User Realms
    11. Custom Error Pages
    12. Frustrations with BASIC and DIGEST
    13. Doing It Yourself
    14. FORM Authentication
    15. Programmatic Security
    16. Beyond Container-Based Security
    17. OWASP and the Top 10