LoginModule

Create an automated Registration/Login module using Eclipse Neon, Tomcat v8.5 or higher, Java and MySQL. The delivered product will be the zipped Eclipse workspace with all files. There will be four web pages: Registration Page ([login to view URL] or jsp), secured by transport-guarantee of https to protect the entered password. Secured page ([login to view URL] or jsp), secured by authentication requirement, requiring successful login using registration data. Login page ([login to view URL] or jsp) will provide username/password login fields, a link to the registration page for users who do not have credentials yet, and a "forgot password" link. Password reset page ([login to view URL] or jsp), containing a password field, and a password confirmation field. The initial access will be to a secured page that requires login, which will activate the server's j_security_check and present the login page. The login page will have username and password fields, as well as a link to the registration page. Any access to any page should force the use of https, but especially the registration page where a password will be entered. Successful registration must incorporate the new credentials into the server's authentication mechanism immediately. The registration page will accept a username in the form of an email address and a password. When the user submits the registration form, the Java code will generate a random salt string to hash with the password using SHA-256 or better. The username (email), salt value, and password hash (not the password) will be stored in a MySQL database, and the Tomcat server must immediately recognize these credentials. The Java code for the password processing is attached, but not required if you have your own. After registration, the user will be redirected to the secure test page, which should activate the j_security_check again. Logging in with the new username/password will execute Java code that accesses the MySQL database to retrieve the salt and hash, it will hash the submitted password combined with the stored salt, and compare to the stored hash value. A match will allow access to the secured resource, while a failure will redirect to an access denied page. The "forgot password" link on the login page will generate a random hash, email it to the user as part of a clickable link. Clicking the email link will verify the hashed value which was saved in MySQL, and redirect to a password reset page. The delivered product will have the zipped Eclipse workspace, containing all files necessary to recreate the test environment, including Tomcat v8.5 configuration files, and setup or configuration instructions if any are necessary.