3 replies to this topic

[toto_7]

Hello,

I would like to ask how I can achieve an authentication for user to the server in Java, using user's username.

Thanks in advance,
toto_7

[wim DC]

Simple:

• html form sends username and password to the server.
• Server checks if they are correct
• If yes: put something in the session.

You can access the session by doing request.getSession() or something close to that.

[toto_7]

wim DC thanks for quick response. I think your answer is not what I'm looking for and that's my fault. My project is based on Java RMI so now I'm trying to implement a kind of security between server and clients. So I'm generating a pair of keys for each and now I'm looking a way to confirm that this client is who

[wim DC]

Well, I would start by using these:
SslRMIServerSocketFactory (Java 2 Platform SE 5.0)
&
SslRMIClientSocketFactory (Java 2 Platform SE 5.0)
So then at least the client / server communication is already secured.

And then either make a login object that returns a token (a random string) when the client logs in. Then this token has to be sent for every next call to the server so it can check that token. (or you can send username/ password for every method call)
... I guess. Can't be sure I'm not really into the RMI stuff.