Sorry an error hos occurred. Please try agin later: |

| YES Page Directive a © In the main JSP file, use the “errorPage” attribute to direct to the error page. <% page errorPage="errorPage jsp’ , Steps in Error Handling z| |v Create an error page with isErrorPage="true” to handle errors. ¥ Use the ‘errorPage’ directive in the main JSP page to specify the error page. WV When an error occurs, the user is redirected to the specified error @ curious_programmerChapter 4: Introduction to JavaBeans @ curious_programmer v¥ What is JavaBeans? JavaBeans are reusable software components for Java applications. They follow a set of conventions and can be e-sily integrated and manipulated in visual development tools JavaBeans encapsulate data into reusable and customizable Java components known as beans | | Methods Events | l ae aa — ————— | b={ JavaBeans follow a set of conventions: |=) | wv {G0} Properties: Private fields with public getters/selters | ¥ &} Methods: Public methods to perform actions | wv & Events: Listeners to handle eventsJavaBean Conventions @ curious_programmer @) Properties Y Use private fields with public getters and setters to encapsulate data 2 a ee = v Keeps data hidden from public class UserBean ( other classes. private String name, // Privote Feld | y Getter methods retum the public String getName © { nO aces return name; | v Setter methods allow setting the ty vol Public Void setName(Shrng named | 9 bob SE [Link] = name; 3 } } @ Methods ¥ Provide public methods to perform actions. [ public class UserBean { Vv Public methods provide public void updateProfile © { ERSRTANG ech Sess ‘[Link]-printinC Updating a Berton actions ike! user profile y calculations, database access, ; } | etc. See ¥ Usually, method names © tent start with a verb Vv Use event listeners to handle events and notify other components. User updates profile —> Component reacts to aeProperties (Read-only, Write-only, Read-Write ) @ curious_programmer ey) JavaBean properties control access to data encapsulated in beans. Properties can be Read-only) (Write-only) ((Read-Write | (Read-only Properties | Getter method only for read access: public class Product: { private double price; //Private field Read © > ~ public double getPrice() { return price; jj Sy | $23.00 Setter method only for write access: [ public class User: { private: String: password; //Prsate fied] Write [awa | public void set Password(String passwieray” > ei this password = password; ( Read-Write Properties ) Both getter and setter methods for read and write access | public class Person: { Read & Write Private: int age; //Private field -—-----—----------—-- public int getAge'() { return age: Public void setAgelint age) { this. age = age;Getter & Setter Methods @cu © What are Getter and Setter Methods? us __programmer v Getter and setter methods are used to access and modify the value of private fields in JavaBeans. Getter Method Provides read access to a private field GO public class UserBean{ private String name; // Private field public String getName() { return name; Provides write access to a private field i => = = public class UserBean { private String name; // Private field Write ce -> [serter public void setName(String name) |- this. name = name; Getter and setter methods ensure data encapsulation, allowing control ove access and modification of private fields. v Getter methods start with ‘get’ and return the field value. v Setter methods start with ‘set’ and update the field value.Using Beans in JSP S&S Advantages of JavaBeans SO} Why use JovaBeans in ISP? ¥ JavaBeans in ISP (JavaServer Pages) encapsulate business logic and properties into reusable components called beans, providing several advantages v Beans are reusable components that can be instantiated multiple times. | “user” class="[Link]’ /> S&S WEB-INF : Configuration files (eg, web xml), Java classes, JAR libraries static : Static resources like images, CSS, JavaScript files [Link]Deployment Descriptor @ curious_programmer “Deployment Descriptor @ A deployment descriptor is an XML file used to describe how a web application should be deployed and configured in a server. _ v Defines configuration settings for the application [Link] v Specifies servlets, URL pattems, initialization parameters, and security settings | Api ication Servers vs Web Servers ) | Application | Servers =| @E © Runs web applications and © Runs web applications enterprise-level applications that generate dynamic content © Supports Servlets, ISP © Handles HTTP requests and GovaServer Pages), EJBs, JNDI,; responses and transactions, © Supports Servlets and JSP, © Provides services like database but not EJBs or advanced features connectivity. session management, and messaging, eg Overlapping 1g Feature: )————= See @ Both can run Servlets and JSP to generate dynamic web content. @ curious_programmerIntroduction to Apache Tomcat @ curious_programmer @ Apache Tomcat is an open source web server and servlet container developed by the Apache Software Foundation. v Tt is used to deploy and run Java-based web applications in a lightweight, fast, and efficient environment v Supports Java Servlets, ISP GavaServer Aoneaes Tomcat Pages), and WebSocket v Cross-platform, runs on Windows, macOS, Linux, etc. SSiep loying Web Applications | To deploy a web application in Apache Torncat, follow these steps: ¥ Package the web application into a WAR. file (Web Application Archive) tomcat Avebapps/ [a}_ [Link] v Copy the WAR file to the “webapps” directory in the Tomcat installation directory v Torncat automatically deploys. the WAR file and makes the web application accessible <> hip: /Accatort srr) “Done! The web ‘application is now accessible via | ___[Link] @ curious_programmerContext & Configuration Files @ curious_programmer _{ Context Files a © Context files are XML files that define settings specific to a web application's context context xm|_ | —_—_—»> v Define the context path © [zZesreteree | vy Configure data sources (eq, database connection pools) v a Set up security constraints and session settings configuration Files Configuration files are XML files that define server-wide settings, including how web applications are deployed and managed. ¥ Most cornmon configuration files are the most common : [Link] | Deployment Descriptor — Defines servlets, serviet-mapping, welcome files, error pages, ete [Link] | [Link] Main server configuration file Configures server level components, ports, thread pools, etc Users and roles — Defines user accounts, roles, and admin permissions. @ curious_programmerChapter 7: Session Management & Security LB Authentication & Authorization Iz Bie Anthentication Authentication is the process of verifying who a user is. Tt ensures only legitimate users can access an account or system. ** ‘OGIN | Gomis: | —> Gorn) (GSEs > Passwords > Two-Factor Authentication Authorization Authorization is the process of verifying what a user is allowed to do. It controls access levels and permissions after authentication. Examples Roles ------>|@ Roles | + > Access Control Lists (ACLS)Form-based Authentication & Programmatic Security @ curious_programmer Form-based Authentication is the process of verifying a user's identity using an HTML form. & Username Gaexxx | Locin User123, yw Programmatic Security a Programmatic Security involves handling authentication and authorization through code ina secure, programmable way ~ Developers use server-side code to check a user's credentials and enforce access controls based on roles or permissions. v Example: : if Cauthenticate(username, password) {iF (user hasRoletadmin’)) { // gpark adrein access } else / grant regular access + --- + Qe @ curious_programmerSession Timeout & Preventing Session Hijacking @ curious_programmer Session Timeout is a security feature that automatically logs out a user after a period of inactivity ® Prevents unauthorized access if a user leaves their session unattended. > Reduces the risk of sessions being exploited through idle time = eee Your Session Will Expire In 0:30 0120 v Example: Session Hijacking is an attack where an attacker takes over a user's session, v Use Secure Cookies > Implement HTTPS v Regenerate. Session IDs Cae { <(sessionid> 123ABC4S6DEF @ curious_programmer acm kon Cees energy |\ & HTTPS Basics &f CSRF 2 XSS Overview @ curious_programmer ~ HTTPS stands for Hypertext Transfer Protocol Secure, Tt encrypts data transmitted between a user's browser ~ HTTPS is important: ~ Encrypts data to keep it secure from eavesdr: rs. ~ Secure communication between a user's browser and server Caen ILESRE (Cross-Site Request Forgery) Jz =CSRF tricks a user into performing actions they didn't intend to by exploiting their authenticated session. : -XSS (Cross-Site Scripting) }z—=—=> 4 XSS involves injecting malicious scripts: into web pages viewed by other users. @ curious_programmerChapter 8: Filters & Listeners @ curious_programmer y Filters _ —— Filters are used to process and modify incoming requests | or outgoing responses before they reach the target resource. | ¥ Filter Life Cycle Incoming Request === Outgoing Response. —A filter has three key stages: 1. Initialized: initQ called once at startup 2. Filtering: doFilterO called for every request or response. = Destroyed: destroy() called once when filter is removed. (¥ Authentication Filters ) Authentication filters are used to verify and authenticate users before allowing them access oo-- => Check Credentials }------ == ae . Incoming aie Bequeey ls Authentication E= ABs : Se cy Denied eee > Access Granted =—d)Logging Filters & Compression Filters @ curious_programmer v Logging Filters = Capture and lag information about requests and responses ¥ Logs details of each request, including URL, parameters, headers, timestamp, etc ¥ Logs details of each response, including status codes, content type, size, etc v Helps in monitoring, debugging, and auditing web applications. ¥ Logging Filters } Tncoming Request (Logs requests & |— Compression Filters = Compression Filters reduce the size of web content before sending it to the client. v Tt uses GZIP compression to make responses smaller in size Benefits include: v Compresses responses, such. HTML, CSS, 35, JSON, reducing their size v Faster lood times by reducing the amount of data sent over the network. v Saves bandwidth, especially beneficial for users with slow connections, GET /page?user=1234 | POST /form- 200 OK 123-2an2018 20.21 -3236 3..Jan 2018 1936 -059Listeners @ curious_ programmer v_Listeners * Listeners are classes that listen for specific events in a web application and respond when those events occur. thee Eo) v. Eeonontaaes + Listens for changes in the servlet context Capplication-scope) v¥ Context Initialized: Called when the web application starts. v Context Destroyed: Called when the web application shuts down, eee v HttpSessionListener + Listens for events related to user sessions. v Session Created: Called when a new user session is created, ¥ Session Destroyed: Called when a user session is invalidated or times out — (Track user login/logout activity ) a @ curious_programmerListeners @ curious_programmer v Listeners * Listeners are classes that listen for specific events in a web application and respond when those events occur (Execute custom code when specific events happen } v Request Listeners + Request listeners respond to events in the request life cycle. VY Request Initializea: Called when a new request is received. v Request Destroyed: Called when a request is completed ———— {REQUEST LIFE CYCLE | Z- el Process Request Request Destroyed | Request = — a “Monitor & respond to request events | v_ Use Cases Vlog requests and responses for monitoring and auditing v Check authentication before processing a request V Track performance metrics like request processing time wv Implement custom logic like setting attributes in requests. @ curious_programmerChapter 9: Enterprise JavaBeans (EJB - Overview) = @ curious_programmer v Introduction to EJB vv What is EJB? EJB stands for Enterprise JavaBeans. Tk is a server-side component architecture used for building scalable, robust, and transactional business applications in Java. Entity Beans <— |! i Other Systems VY Client: The extemal application that interacts with the EJBs. ¥ EJB Container: The runtime environment within the app server that manages EJBs. V Session Beans: Handle business logic. v Entity Beans: Represent persistent data Stored in a database. V Message-Driven Beans: Process asynchronous messages, [@ Client: The external application that interacts with the EJBs. (ESB Container: The runtime environment within the app server that manages EJBs. Session Beans: Handle business logic. [@ Entity Beans: Represent persistent data stored in a database. [Z Message-Driven Beans: Process asynchronous messages.Types of EJB: @ curious__programmer ( Session beans are EJB components that implement business logic in an application. They run within the EJB container in an application server wv Asingle, shared instance used by | all clients | (. Does not maintain ¥ Maintains state any state between between client calls client calls. for a spocific user. | Vv Each call is cE Remembers user | | y Maintains glebal state i : interactions. Seas independent interactions. | | ecross users. J Scapa —> —> \- | E &22a2 <4 . Clients Client State! Sa V¥ Maintains state between client calls for a specific user. Vv Remembers user interactions. @ curious_ programmerMessage-Driven Beans & EJB Life Cycle @ curious_programmer \ Message-driven beans are EJB components that process asynchronous. | messages sent to the application from a message-criented middleware | (MOM) or message queue. Does Not Exist ~~ Anew EJB instance is cre. by the EJB container ENB container initializes EJB container initializes and “e the bean. and ae bean. Does Not Exist Bean ic removed from The bean is — to the pool and cleaned up. process incoming messages v Does Not Exist: Bean is removed from the pool and cleaned up. v New Instance: A new EJB instance is created by the EJB container ¥ Initialization: EB container initializes and sets up the bean. Y Ready: The bean is ready to process incoming messages. ¥ Message Processing: The bean processes incoming messages from _| the message queue. @ curious_ programmer| Transactions in EJB |v Enterprise JavaBeans (EJB) use transactions to ensure data integrity and consistency across business operations Database | Y ESB transactions are automatically managed by the EJB container, ensuring ACID properties A\) operations are treated as a single unit Transactions | | Intermediate states | | Once committed, leave data in are not visible to a. consistent || other transactions | | permanent. state. \ {ESB vs Spring (Overview) } : = = @B Spring Framework |v Java EE server- Y Lightweight, modular |_| Type side framework Roeore |_| Fransactional| W Built-in container- Y Flexible trarsaction Management | managed transaction management with support @ Transactional annotation eae XML-based configuration within application server Deployment | 7 Requires deployment in | Java EE application server | Learning Curve] 7 Moderate to steep v Annetation-based configuration and XML support Y Can nun in any Java environment, standalone or with a server V Friendlier learning curve ©) \ @ curious_programmerChapter 10: Java Persistence API (JPA) / Hibernate (Basics) @ curious_programmer yv_ORM Concepts ORM stands for ObjectRelational Mapping, It is a technique used to map Java objects to database tables t—' ORM _|g—> ORM allows developers to interact with a database using Java objects instead of SQL queries. v_ JPA ArchitectureEntity Mapping, @ curious_programmer v Annotations Annotations are used to define mappings between Java objects and database tables in JPA = @Entity: marks a class as a JPA entity — @ld: marks the primary key of the entity — @Table: specifies the table in the database v Relationship Mappings: v@OneToOne: defines a one-to-one relationship between two entities. (Oto) (Gretoore) (Chet Ore) Sera AS | Entity & lod entiye Fae | Y@OneTeMany defines a one-to-many relationship where an | entity is related to many other entities. v@OneToMany defines a many-to-many relationship | between two entities Stenenany | [Entity e | Entity 2¢| GOneToMang — ee Y@ManyTeMany defines a many-to-many relationship between tuo entities