Introduction To Building Enterprise Web Application With Spring Mvc
Download as PPTX, PDF2 likes4,540 views
The document provides an introduction to building enterprise web applications using Spring MVC, discussing the architecture, key features, and various components involved in the framework. It covers essential concepts like inversion of control, aspect-oriented programming, and security mechanisms within Spring, emphasizing its lightweight and flexible nature. The document highlights Spring's role in managing application complexity and facilitating agile development practices.
Introduction To Building Enterprise Web Application With Spring Mvc
- 1. Introduction to Building Enterprise Web Application with Spring MVCBy Abdelmonaim Remaniabdelmonaim.remani@gmail.comPolymathic-coder.comSilicon Valley Code Camp v 4.0
- 2. Enterprise ApplicationComplexFunctional RequirementsNon-Functional RequirementsExecutionPerformanceReliabilitySecurityEvolutionTestabilityMaintainabilityExtensibilityScalability (Horizontal and Vertical)
- 3. Modern Enterprise ApplicationThe ArchitectureN-Tier ApplicationPresentation LayerMicro-Architecture (Commands, Valuators, etc..)MVC PatternService / Business LayerData Access LayerNaked Objects PatternDataMiddlewareResource LookupService locator pattern
- 5. Cross-Cutting ConcernsAspect Oriented Programming
- 6. FrameworksAn ArchitectureA well defined structure to solve a problemLibraryFramework vs. LibraryInvoking you vs. Being InvokedGeneric vs. SpecificToolsCompiler, Debugger, Etc…Scaffolding and other utilitiesEtc…
- 7. FrameworksHeavyweight vs. LightweightThe need for a platform or a stack (JEE as an example)The ability to load in-demand the only the necessary componentsThe memory footprintThe build sizeDeployment easeEtc…
- 9. What is Spring?Application FrameworkJavaOther Implementations are available (Spring .NET)Open-SourceLightweightPOJO Based By Rod JohnsonExpert One-on-One J2EE Design and Development in, 20022EE without EJB, 2004Becoming the De Facto Standard of Java Enterprise Applications
- 10. Features: Inversion ControlThe ProblemResource acquiring viaStatic method of a singleton factoryInstantiation of an concrete classDirectory Services API that allows for discorery and lookup (For example JNDI)Hard Dependencies are createdProblems with reusing code with hard dependenciesPainful Unit Testing in isolation
- 11. Features: Inversion ControlThe solutionUse parameterized classesDependencies are decoupled from classesBy Coding against interfacesInversion of Control: Dependency InjectionThe Hollywood Principle “Don't call us, we'll call you.“Wait a minute this a lot of work!Spring to the rescue
- 12. The TradeoffResource injection is done at runtimeUsually done using reflectionNo static type checking
- 13. Features: AgilityIf you read the Agile Manifesto, Agile is for the most part for a technical prospectiveFrequent deliverablesAbility and ease of refactoringDecoupling , DRY, and TDD are key makes’em easier
- 14. Features: AOPOOP creates a hierarchical object model by natureCross cutting concernsare not necessary part of the application logicOccur across the object model in unrelated partsLoggingSecurityTransaction managementEtc…AOP (Aspect Oriented Programming)Modularization of cross cutting concerns
- 15. Features: LibrariesPOJO Wrappers for most popular frameworksAllowing injection of dependencies into the standard implementationStrutsJSFApache TapestryEtc…Full support of JEEIntegration with other frameworks
- 17. Spring Core
- 18. Spring CoreAll you need to know is:The ContainerThe Bean FactoryManage bean instances (POJOs)’ life cycleConfiguring their dependenciesEtc…Can be used a partially compliant EJB3 ContainerSpring Pitchfork
- 19. Spring MVC
- 20. Spring MVCA Front Controller PatternDispatcherRequest RoutingControllers are Spring beans (Managed POJOs)No session scope for scalability
- 21. Spring MVCViewsJSP, JSF, FlexControllersMany typesCustom controllersModelService LayerDAO for persistenceJDBC and ORM (Hibernate, iBATIS, etc...)
- 22. Spring MVC ComplementsSpring Web FlowFor Web Application that areMore dynamicNon-linear without arbitrary end pointsSpring Portlet MVCA JSR 168 compliant Portlet environnentLarge web application composed with subcomponents on the same web page
- 23. Spring SecurityFormally Known As Acegi
- 24. Code Time!
- 26. Security TerminologyAuthenticationthe verification of the user identityAuthorizationPermissions granted to the identified userAccess ControlBy arbitrary conditions that may depend to Attributes of clientsTemporal and Local ConditionHuman User DetectionOtherChannel or Transport SecurityEncryption
- 27. Security TerminologyRealmA Defined the authentication policyUserA defined individual in the Application ServerGroupA defined classification of users by common traits in the Application Server.RoleAn abstract name of the permissions to access a particular set of resources in an application
- 28. Available FrameworksSpring SecurityFormer AcegiJAAS (Java Authentication and Authorization Service)jGuardApache Shiro
- 29. Spring SecuritySecurity is your responsibilityFeatures:It is not the standardNo class loader authorization capabilitiesSimple configurationPortable across containersCustomizable and extendablePluggable authentication and web request URI securitySupport method interception, Single Sign-On, and Swing clients
- 30. AuthenticationAuthenticationForm-BasedBasicDigestLDAPNTLM (NT LAN Manager)SSO (Single Sign-On)JA-SIG CASOpen IDAtlassian CrowdSiteMinderX.509
- 31. AuthenticationMechanismsInteract with the userProvidersCheck credentialsBundles details in a Thread Local security context holderRepositoriesStore roles and profile infoIn MemoryJDBCLDAPEtc…
- 32. AuthorizationWeb AuthorizationURL-BasedWhich URL patterns and HTTP methods are allowed to be accessed by which roleThe rules are top-down with most specific at the topPaths are in Ant format by defaultMethod authorizationReusableProtocol AngosticUses AOPAnnotations SupportJSR 250Spring @SecuredSpring Security 2.5 ELSupport for Instance-based XML
- 33. Spring AOP
- 34. Cross Cutting ConcernsLoggingTransaction ManagementSecurityCashingSome Business LogicEtc…
- 35. Aspect Oriented ProgrammingThe ProblemCode TanglingNo CohesionCode ScatteringNot DRYThe SolutionAspect Oriented ProgrammingAspectJModulation in Aspects and weaving into the application code
- 36. Spring APOSpring AOPJava based AOP FrameworkBuilt on top of AspectJInterception based
- 37. AOP TerminologyJoint PointA point in the execution of the programPoint CutAn expression that selects one or more joint pointAspectJ Expression LanguageAdviceThe code to be weaved at a joint pointAspectPoint Cut + Advice
- 39. Q & A
- 40. Thank You!