First we will start with setting up the initial code using SpringBoot. We have already discussed in
JCart: Initial Code SetUp article about creating a maven module
jcart-site which will be our ShoppingCart application.
In that article we have shown what springboot dependencies to add as well.
Just to recap we will be using SpringBoot, SpringMVC, Thymeleaf, JPA for our ShoppingCart application.
jcart-site/pom.xml
<project xmlns="http://maven.apache.org/POM/4.0.0"
xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
xsi:schemaLocation="http://maven.apache.org/POM/4.0.0
http://maven.apache.org/xsd/maven-4.0.0.xsd">
<modelVersion>4.0.0</modelVersion>
<parent>
<groupId>com.sivalabs</groupId>
<artifactId>jcart</artifactId>
<version>1.0</version>
</parent>
<artifactId>jcart-site</artifactId>
<build>
<plugins>
<plugin>
<groupId>org.springframework.boot</groupId>
<artifactId>spring-boot-maven-plugin</artifactId>
</plugin>
</plugins>
</build>
<dependencies>
<dependency>
<groupId>com.sivalabs</groupId>
<artifactId>jcart-core</artifactId>
<version>${project.version}</version>
</dependency>
<dependency>
<groupId>org.springframework.boot</groupId>
<artifactId>spring-boot-starter-web</artifactId>
</dependency>
<dependency>
<groupId>org.springframework.boot</groupId>
<artifactId>spring-boot-starter-thymeleaf</artifactId>
</dependency>
<dependency>
<groupId>org.springframework.boot</groupId>
<artifactId>spring-boot-starter-security</artifactId>
</dependency>
<dependency>
<groupId>org.thymeleaf.extras</groupId>
<artifactId>thymeleaf-extras-springsecurity4</artifactId>
</dependency>
<dependency>
<groupId>org.springframework.boot</groupId>
<artifactId>spring-boot-starter-test</artifactId>
<scope>test</scope>
</dependency>
<dependency>
<groupId>org.springframework.boot</groupId>
<artifactId>spring-boot-devtools</artifactId>
<optional>true</optional>
</dependency>
<dependency>
<groupId>commons-io</groupId>
<artifactId>commons-io</artifactId>
<version>2.3</version>
</dependency>
</dependencies>
</project>
For our JCart - Admin application we have used
AdminLTE (
https://almsaeedstudio.com/preview) theme which is based on Bootstrap with nice coloring scheme. It looks good for Administration kind of applications but not so good for a public facing e-commerce application, IMHO.
As I said earlier I am not a UI designer, so again I have googled for free e-commerce templates and found
Ustora HTML5 ECommerce Template (
https://www.freshdesignweb.com/ustora/)
which looks good to me. So we will be using this template for our ShoppingCart screens.
Configuring HTTPS/SSL
As we discussed in
JCart-Admin Configuring HTTPS/SSL post we will generate the keystore file and copy it to
jcart-site/src/main/resources/ directory.
Configure the SSL related configuration properties in
jcart-site/src/main/resources/application-default.properties
server.port=8443
server.ssl.key-store=classpath:jcartsitekeystore.p12
server.ssl.key-store-password=jcartsite
server.ssl.keyStoreType=PKCS12
server.ssl.keyAlias=jcartsitetomcat
WebMVC Configuration
We will create
com.sivalabs.jcart.site.config.WebConfig.java for configuring SpringMVC components like ViewControllers, Interceptors, TemplateResolvers, SpringSecurityDialect and EmbeddedTomcatConnector as follows:
@Configuration
public class WebConfig extends WebMvcConfigurerAdapter
{
@Value("${server.port:8443}") private int serverPort;
@Autowired
private MessageSource messageSource;
@Override
public Validator getValidator() {
LocalValidatorFactoryBean factory = new LocalValidatorFactoryBean();
factory.setValidationMessageSource(messageSource);
return factory;
}
@Override
public void addViewControllers(ViewControllerRegistry registry)
{
super.addViewControllers(registry);
registry.addViewController("/login").setViewName("login");
registry.addViewController("/register").setViewName("register");
registry.addRedirectViewController("/", "/home");
}
@Override
public void addInterceptors(InterceptorRegistry registry)
{
super.addInterceptors(registry);
}
@Bean
public ClassLoaderTemplateResolver emailTemplateResolver(){
ClassLoaderTemplateResolver emailTemplateResolver = new ClassLoaderTemplateResolver();
emailTemplateResolver.setPrefix("email-templates/");
emailTemplateResolver.setSuffix(".html");
emailTemplateResolver.setTemplateMode("HTML5");
emailTemplateResolver.setCharacterEncoding("UTF-8");
emailTemplateResolver.setOrder(2);
return emailTemplateResolver;
}
@Bean
public SpringSecurityDialect securityDialect() {
return new SpringSecurityDialect();
}
@Bean
public EmbeddedServletContainerFactory servletContainer() {
TomcatEmbeddedServletContainerFactory tomcat = new TomcatEmbeddedServletContainerFactory() {
@Override
protected void postProcessContext(Context context) {
SecurityConstraint securityConstraint = new SecurityConstraint();
securityConstraint.setUserConstraint("CONFIDENTIAL");
SecurityCollection collection = new SecurityCollection();
collection.addPattern("/*");
securityConstraint.addCollection(collection);
context.addConstraint(securityConstraint);
}
};
tomcat.addAdditionalTomcatConnectors(initiateHttpConnector());
return tomcat;
}
private Connector initiateHttpConnector() {
Connector connector = new Connector("org.apache.coyote.http11.Http11NioProtocol");
connector.setScheme("http");
connector.setPort(8080);
connector.setSecure(false);
connector.setRedirectPort(serverPort);
return connector;
}
}
Note that for ShoppingCart application we will be running embedded tomcat server on
https://host:8443 and call to
http://host:8080 port will be redirected to
https://host:8443.
Configuring SpringSecurity
As it is a public facing e-commerce site customers can browse through catalog products and add products to cart without requiring to login. But in order to checkout we will redirect the customer to login if he/she is not already loggedin. Also there are some URL that we would like to protect like customer's
MyAccount page,
Order History page etc.
So, for ShoppingCart application, Customer would become the user.
Create SpringSecurity User Wrapper AuthenticatedUser
package com.sivalabs.jcart.admin.security;
import java.util.Collection;
import org.springframework.security.core.GrantedAuthority;
import org.springframework.security.core.authority.AuthorityUtils;
import com.sivalabs.jcart.entities.Customer;
public class AuthenticatedUser extends org.springframework.security.core.userdetails.User
{
private static final long serialVersionUID = 1L;
private Customer customer;
public AuthenticatedUser(Customer customer)
{
super(customer.getEmail(), customer.getPassword(), getAuthorities(customer));
this.customer = customer;
}
public Customer getCustomer()
{
return customer;
}
private static Collection<? extends GrantedAuthority> getAuthorities(Customer customer)
{
Collection<GrantedAuthority> authorities = AuthorityUtils.createAuthorityList("ROLE_USER");
return authorities;
}
}
Create Spring Data JPA Repository for Customer Entity
jcart-core/src/main/java/com/sivalabs/jcart/customers/CustomerRepository.java as follows:
public interface CustomerRepository extends JpaRepository<Customer, Integer> {
Customer findByEmail(String email);
}
Create jcart-core/src/main/java/com/sivalabs/jcart/customers/CustomerService.java to implement all Customer related operations.
@Service
@Transactional
public class CustomerService
{
@Autowired
private CustomerRepository customerRepository;
public Customer getCustomerByEmail(String email) {
return customerRepository.findByEmail(email);
}
}
Create com.sivalabs.jcart.admin.security.CustomUserDetailsService.java which implements SpringSecurity's UserDetailsService.
@Service
@Transactional
public class CustomUserDetailsService implements UserDetailsService
{
@Autowired CustomerService customerService;
@Override
public UserDetails loadUserByUsername(String email)
throws UsernameNotFoundException {
Customer customer = customerService.getCustomerByEmail(email);
if(customer == null){
throw new UsernameNotFoundException("Email "+email+" not found");
}
return new AuthenticatedUser(customer);
}
}
Create com.sivalabs.jcart.site.security.WebSecurityConfig.java to configure SpringSecurity configuration.
@Configuration
@EnableWebSecurity
@EnableGlobalMethodSecurity(securedEnabled = true, proxyTargetClass = true)
public class WebSecurityConfig extends WebSecurityConfigurerAdapter {
@Autowired
private UserDetailsService customUserDetailsService;
@Bean
public PasswordEncoder passwordEncoder() {
return new BCryptPasswordEncoder();
}
@Override
protected void configure(HttpSecurity http) throws Exception {
http
.csrf().disable()
.authorizeRequests()
.antMatchers("/resources/**", "/webjars/**","/assets/**").permitAll()
.antMatchers("/", "/register", "/forgotPwd","/resetPwd").permitAll()
.antMatchers("/myAccount","/checkout","/orders").authenticated()
.and()
.formLogin()
.loginPage("/login")
.defaultSuccessUrl("/home")
.failureUrl("/login?error")
.permitAll()
.and()
.logout()
.logoutRequestMatcher(new AntPathRequestMatcher("/logout"))
.permitAll()
.and()
.exceptionHandling().accessDeniedPage("/403");
}
@Autowired
public void configureGlobal(AuthenticationManagerBuilder auth) throws Exception {
auth
.userDetailsService(customUserDetailsService)
.passwordEncoder(passwordEncoder());
}
}
Finally, let us create a simple
HomeController to handle /home request and render
home.html view.
@Controller
public class HomeController
{
@RequestMapping("/home")
public String home(Model model)
{
return "home";
}
}
<!DOCTYPE html>
<html xmlns="http://www.w3.org/1999/xhtml"
xmlns:th="http://www.thymeleaf.org">
<head>
<meta charset="utf-8"/>
<meta http-equiv="X-UA-Compatible" content="IE=edge"/>
<meta name="viewport" content="width=device-width, initial-scale=1"/>
<title>QuilCart</title>
</head>
<body>
<h3>Welcome to QuilCart</h3>
</body>
</html>
Now run the application and point your browser to
http://localhost:8080. It should automatically redirect you to
https://localhost:8443/home and show home.html view.
In our next post we will setup the UI Layout using Thymeleaf templates and start developing screens.
