• Understand the value of web applications to an IT enterprise, and the importance of the Java EE platform in enabling web development.
• Build servlets to respond to HTTP requests.
• Build JavaServer Pages to define HTTP responses.
• Combine servlets and JSPs in a model/view/controller architecture to maximize efficiency and maintainability of application code.
• Define HTML forms and process form input.
• Store and retrieve information at request, session, and application scope.
• Make effective use of HTTP sessions as managed by the Java EE web container.
• Use the JSP Standard Tag Library to implement appropriate presentation logic in a JSP.
• Take full advantage of the relationship of servlets and JSPs to the Java EE web container using configuration, context, and lifecycle techniques.
• Manage persistent data from web applications by working with persistence tiers, JDBC, and/or JPA.
• Implement and configure servlet filters.
• Declare security policies for web applications, and use programmatic authorization where appropriate.
• Use Contexts and Dependency Injection (CDI) to assemble Java EE components.
• Implement Ajax and Ajax-push applications using the Java API for WebSocket.

• Java programming experience is required; "Java Programming," is excellent preparation.
• Exposure to HTML and web page design are beneficial but not necessary.

• This version of the course works with the Tomcat server. Our Java EE courses are available in variants that support various server products, including Tomcat, GlassFish, JBoss, and WebLogic.

• The World Wide Web
• HTTP
• HTML and XML
• CSS
• Dynamic Web Applications
• The Java EE Platform
• Java EE Servers and Portability
• Servlets
• JavaServer Pages
• JSTL
• Web Archives and Enterprise Archives
• Model/View/Controller
• Forms
• Sessions
• Context and Lifecycle
• Databases
• Security
• Filters
• JavaServer Faces

• The HTTP Message Model
• The Servlets API "Kernel"
• HttpServlet
• Request and Response Objects
• Mapping URLs
• Attributes and Scopes
• Forwarding and Redirecting

• Dynamic Web Pages
• Relationship to Servlets
• Directives
• The Unified Expression Language
• Page Scope
• Implicit Objects
• <jsp:useBean> and "Model 1"
• MVC and "Model 2"
• JSP Documents

• HTML Forms
• Submit Method: GET vs. POST
• Reading Single-Value Components
• Reading Multi-Value Components
• Reading Button Input
• Input Validation

• Sessions over HTTP
• HttpSession
• Session Scope
• Session Pitfalls

• Custom Tags
• The JSTL Libraries
• The Core Library
• Iterating Over Collections
• The Formatting Library
• Formatting Dates and Numbers
• Working with Maps
• Conditionals
• Loops
• Variables
• Importing Documents

• Custom Tag Libraries
• Tag Library Architecture
• Implementing in Java or JSP
• Correct Use of Scopes
• Invoking Presentation Logic
• Reusing Presentation Fragments
• Classic Tag Handlers
• Simple Tag Handlers
• Tag Files

• Containers and Components
• Context and Lifecycle Interfaces
• Initialization and Context Parameters
• Loading Resources
• Lifecycle Methods
• Lifecycle Annotations
• Context Listeners
• JNDI and the Component Environment
• Dependency Injection

• Persistence Challenges
• Persistence Strategies
• JDBC
• DriverManager
• DataSource
• Data Access Objects
• JNDI Quirks and Portability Issues
• JPA
• Entity Annotations
• Entity Managers
• Persistence Units
• Working with Persistent Data
• Processing Tables
• Limiting Query Scope

• Servlet Filters
• Uses for Filters
• Implementation
• Deployment
• Configuration and Context

• Threats to Enterprise IT
• Web Applications as Prime Targets
• Container Services
• Authentication for Web Applications
• Authorization
• HTTP BASIC Authentication
• HTTP DIGEST Authentication
• Declaring Security Constraints
• Abstract Roles, Concrete Realms
• Configuring User Realms
• Custom Error Pages
• Frustrations with BASIC and DIGEST
• Doing It Yourself
• FORM Authentication
• Programmatic Security
• Beyond Container-Based Security
• OWASP and the Top 10

• Java EE 5 Dependency Injection
• Contexts and Dependency Injection
• CDI Configuration
• What Can Be Injected
• Producers and Disposers
• Qualifiers
• Named Beans
• Scopes
• Limitations and Pitfalls
• Working with Persistent Data

• Ajax vs. Traditional Web Applications
• Partial Requests and Page Updates
• Pushing Messages
• Web Sockets
• The Java API for WebSocket
• Programmatic and Annotated Endpoints
• Client Endpoints
• Callback Methods
• Broadcasting
• Communicating with Servlets
• Path Parameters
• Pitfalls
• Using CDI

Hardware – minimal: Dual-core 1.8 GHz, 4 gig RAM, 10 gig disk space.

Hardware – recommended: Dual-core 2.8 GHz, 8 gig RAM, 10 gig disk space.

Operating system: Tested on Windows 7/8, Mac OS 10.5.2. Course software should be viable on all systems which support a Java SE 7 Developer's Kit.

Network and Security: Limited privileges required

Software: All free downloadable tools.