SCJP Certification

The Form-based authentication is a type of authentication mechanism. It allows the developer to control the look and feel of the login authentication screens by customizing the login screen and error pages that an HTTP browser presents to the end user. The following actions occur when form-based authentication is declared:

1. A client requests for accessing a protected resource.
2. If the client is unauthenticated, the server redirects the client to a login page.
3. The client submits the login form to the server.
4. The server attempts to authenticate the user.
5. If authentication succeeds, the authenticated user’s principal is checked to ensure it is in a role that is authorized to access the resource. If the user is authorized, the server redirects the client to the resource using the stored URL path.
6. If authentication fails, the client is forwarded or redirected to an error page.