| Login with Database connection [message #1798239] |
Wed, 14 November 2018 15:18  |
|
Hi,
I'm developing a tool with Eclipse Scout Pothon and I want inser a login page that check the credentials in a specific table in a database.
I see various examples but for the moment I didn't find nothing about that.
Have you any suggestions where start?
Thanks in advance for any hint
[Updated on: Wed, 14 November 2018 15:18] Report message to a moderator |
|
|
| Re: Login with Database connection [message #1798617 is a reply to message #1798239] |
Wed, 21 November 2018 09:09  |
 Patrick Baenziger
Messages: 96
Registered: September 2011 |
Member |
|
|
Hello Marco
There is no working example at this time for this.
The basics you'll need to implement are as follows:
- Add a login page and necessary redirects and configuration (This should be handled in the HelloWorld app)
- Add an access controller to the front-end Servlet (UI) to authenticate what the user entered against a data source. (In several examples, this is done against a static config file). This is typically done in the UiServletFilter class, where you add additional AccessControllers. In this controller, you'll contact your backend with the credentials.
- Implement a service that performs authentication against the database or external authentication provider. This would typically be done on the backend server. Most likely, since you haven't got a user and can't call Scout services like that (without additional work), you'll implement an additional Servlet and register it in the web.xml. To do anything with the database, don't forget to create a new ServerRunContext here!
A good starting point would be this question.
As always with security matters: Please be careful with your implementation and consider security risks and OWASP best practices. Depending on your environment and deployment scenario, you might be able to delegate authentication to a webapp container or use an existing well-tested implementation.
Otherwise, the Scout SecurityUtility has many methods to help you create hashed and salted passwords, if you really need to implement it yourself.
|
|
|
Powered by
FUDForum. Page generated in 0.12464 seconds
] 
Search
Help
Register
Login
Home
