Security in Web Application

[SON1]

I am creating a web application.

I would like to create some sort of authentication/security around this web applictation. Ideally it should be portable (so using tomcat-users.xml to store username/passwords is out of the question).

I would like to keep users and their privilages and information in a DB table. Although i am familiar how to authenticate a user that comes from a DB, i am not sure how to keep the user username/password pass from jsp to jsp, or atlernative there is even an easier way of doing it.

How do i go about and do this ?

Thanx

 

[sedj]

Authenticate against the DB using JDBC.
If you need to store the login/password (and I would not !!!!), then use the session object.

--------------------------------------------------
Free Database Connection Pooling Software

http://www.primrose.org.uk

 

[SON1]

what alternatives i have instead if using the session object ?

 

[sedj]

use the DB to store a "logged in or not" value, or store it on the URL (not recommended).

--------------------------------------------------
Free Database Connection Pooling Software

http://www.primrose.org.uk