Autenticação e autorização com JAAS

Bom Dia Galera,

Estou tentando implementar JAAS num app teste e to com alguns problemas, ele não gera erro, mas também não permite acesso ao diretório, poderiam dar uma olhada no meu código:

web.xml

&lt;?xml version="1.0" encoding="UTF-8"?&gt;
&lt;web-app xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns="http://java.sun.com/xml/ns/javaee" xmlns:web="http://java.sun.com/xml/ns/javaee/web-app_2_5.xsd" xsi:schemaLocation="http://java.sun.com/xml/ns/javaee http://java.sun.com/xml/ns/javaee/web-app_3_0.xsd" id="WebApp_ID" version="3.0"&gt;
  &lt;display-name&gt;AppTeste&lt;/display-name&gt;
  &lt;welcome-file-list&gt;
    &lt;welcome-file&gt;index.jsf&lt;/welcome-file&gt;
  &lt;/welcome-file-list&gt;
  &lt;servlet&gt;
    &lt;servlet-name&gt;Faces Servlet&lt;/servlet-name&gt;
    &lt;servlet-class&gt;javax.faces.webapp.FacesServlet&lt;/servlet-class&gt;
    &lt;load-on-startup&gt;1&lt;/load-on-startup&gt;
  &lt;/servlet&gt;
  &lt;servlet-mapping&gt;
    &lt;servlet-name&gt;Faces Servlet&lt;/servlet-name&gt;
    &lt;url-pattern&gt;*.jsf&lt;/url-pattern&gt;
  &lt;/servlet-mapping&gt;
  
  
  &lt;login-config&gt;
&lt;auth-method&gt;FORM&lt;/auth-method&gt;
&lt;realm-name&gt;AppTeste&lt;/realm-name&gt;
&lt;form-login-config&gt;
&lt;form-login-page&gt;/login.jsf&lt;/form-login-page&gt;
&lt;form-error-page&gt;/login.jsf&lt;/form-error-page&gt;
&lt;/form-login-config&gt;
&lt;/login-config&gt;
    
    &lt;security-constraint&gt;
        &lt;web-resource-collection&gt;
            &lt;web-resource-name&gt;paginas admnistrativas&lt;/web-resource-name&gt;
            &lt;url-pattern&gt;/admin/*&lt;/url-pattern&gt;
            &lt;http-method&gt;GET&lt;/http-method&gt;
            &lt;http-method&gt;POST&lt;/http-method&gt;
        &lt;/web-resource-collection&gt;

        &lt;auth-constraint&gt;
            &lt;role-name&gt;admin-role&lt;/role-name&gt;
        &lt;/auth-constraint&gt;
    &lt;/security-constraint&gt;


&lt;/web-app&gt;

sun-web.xml

&lt;?xml version="1.0" encoding="UTF-8"?&gt;
&lt;!DOCTYPE sun-web-app PUBLIC "-//Sun Microsystems, Inc.//DTD Application Server 9.0 Servlet 2.5//EN" "http://www.sun.com/software/appserver/dtds/sun-web-app_2_5-0.dtd"&gt;
&lt;sun-web-app&gt;
  &lt;context-root&gt;/AppTeste&lt;/context-root&gt;
  &lt;class-loader delegate="true"/&gt;
  &lt;jsp-config&gt;
    &lt;property name="keepgenerated" value="true"&gt;
      &lt;description&gt;Keep a copy of the generated servlet class java code.&lt;/description&gt;
    &lt;/property&gt;
  &lt;/jsp-config&gt;
  
  
  &lt;security-role-mapping&gt;
        &lt;role-name&gt;admin-role&lt;/role-name&gt;
        &lt;group-name&gt;admin&lt;/group-name&gt;
    &lt;/security-role-mapping&gt;
  
  
&lt;/sun-web-app&gt;

Meu banco de dados é simples:

tabela role

| Field | Type | Null | Key | Default | Extra |
±-----------±-------------±-----±----±--------±------+
| id | varchar(100) | NO | PRI | NULL | |
| usuario_id | int(11) | NO | | NULL | |
±-----------±-------------±-----±----±--------±------+

tabela usuario

±------±-------------±-----±----±--------±---------------+
| Field | Type | Null | Key | Default | Extra |
±------±-------------±-----±----±--------±---------------+
| id | int(11) | NO | PRI | NULL | auto_increment |
| nome | varchar(100) | NO | | NULL | |
| email | varchar(100) | NO | | NULL | |
| senha | varchar(15) | YES | | NULL | |
±------±-------------±-----±----±--------±---------------+

A estrutura é simples, tenho um diretorio admin, sempre que tentar acessar esse diretorio, joga pro login.
A parte de jogar pro login funciona, porém, ele não valida o usuário

Uso JASS com GlassFish V3

Muito obrigado pela atenção =D

1 Resposta

Topicos relacionados