Java2 Platform Enterprise Edition Platform And Component Specifications

SRV.13.3 Examples

The following examples illustrate the usage of the definitions listed above DTD.

SRV.13.3.1 A Basic Example

<!DOCTYPE web-app PUBLIC "-//Sun Microsystems, Inc. 
//DTD Web Application 2.2 
//EN" "http://java.sun.com/j2ee/dtds/web-app_2_2.dtd"> 
<web-app> 
  <display-name>A Simple Application</display-name> 
  <context-param> 
    <param-name>Webmaster</param-name> 
    <param-value>webmaster@mycorp.com</param-value> 
  </context-param> 
  <servlet> 
    <servlet-name>catalog</servlet-name> 
    <servlet-class>com.mycorp.CatalogServlet</servlet-class> 
    <init-param> 
      <param-name>catalog</param-name> 
      <param-value>Spring</param-value> 
    </init-param> 
  </servlet> 
  <servlet-mapping> 
    <servlet-name>catalog</servlet-name> 
    <url-pattern>/catalog/*</url-pattern> 
  </servlet-mapping> 
  <session-config> 
    <session-timeout>30</session-timeout> 
  </session-config> 
  <mime-mapping> 
    <extension>pdf</extension> 
    <mime-type>application/pdf</mime-type> 
  </mime-mapping> 
  <welcome-file-list> 
    <welcome-file>index.jsp</welcome-file> 
    <welcome-file>index.html</welcome-file> 
    <welcome-file>index.htm</welcome-file> 
  <welcome-file-list> 
  <error-page> 
    <error-code>404</error-code> 
    <location>/404.html</location> 
  </error-page> 
</web-app>

SRV.13.3.2 An Example of Security

<!DOCTYPE web-app PUBLIC "-//Sun Microsystems, Inc. 
//DTD Web Application 2.2 
//EN" "http://java.sun.com/j2ee/dtds/web-app_2_2.dtd"> 
<web-app> 
  <display-name>A Secure Application</display-name> 
  <security-role> 
    <role-name>manager</role-name> 
  </security-role> 
  <servlet> 
    <servlet-name>catalog</servlet-name> 
    <servlet-class>com.mycorp.CatalogServlet</servlet-class> 
    <init-param> 
      <param-name>catalog</param-name> 
      <param-value>Spring</param-value> 
    </init-param> 
    <security-role-ref> 
      <role-name>MGR</role-name> <!-- role name used in code --> 
      <role-link>manager</role-link> 
    </security-role-ref> 
  </servlet> 
  <servlet-mapping> 
    <servlet-name>catalog</servlet-name> 
    <url-pattern>/catalog/*</url-pattern> 
  </servlet-mapping> 
  <security-constraint> 
    <web-resource-collection> 
      <web-resource-name>SalesInfo</web-resource-name> 
      <url-pattern>/salesinfo/*</url-pattern> 
      <http-method>GET</http-method> 
      <http-method>POST</http-method> 
      <user-data-constraint> 
        <transport-guarantee>CONFIDENTIAL</transport-guarantee> 
      </user-data-constraint> 
      <auth-constraint> 
        <role-name>manager</role-name> 
      </auth-constraint> 
    </web-resource-collection> 
  </security-constraint> 
</web-app>