/讀取 Signon- config. xml tected ResourceSURL config getServletContext( getResource("/WEB-INF/signon-configxml"); SignOndAO dao=new SignOnDAO(protectedResourcesURL) /散取登入失敗查面( signon errorscreen) signOn ErrorPage-dao getSignOnErrorPageO /取登入登面( Signon screen) signOnPage =dao. getSignOnPageO /取所有欲保護登面,組成 HashMap protectedResources=dao. getProtectedResourceso i catch (java. net. MalformedURLException ex)i System. err println("Signon Filter: malformed URL exception: ex); 它在初始化時會先讀取 Petstore home\\appslpetstorelsrcldocroot\ WEB-INF\signon-config xml iILKaEX Data Access Object(DAO)’以方便後續程式存取(註3)·此xml檔案主要功用記 錄登入畫面丶登入失敗畫面及所有需登入扌能使用的畫面之URL,以下是 Signon- config. xml片段 <signon-config !- Form sign on page(登入量面-> <signon-form-login-page> Signon screen </signon-form-login-page> <!- Error page when sign on fails(登入失敗查面-> <signon-form-error-page> signon error, screen </signon-form-error-page <I-A Protected Resource-> <web-resource-collection> <web-resource-name>Customer Screen</web-resource-name> <url-pattern>customer screen</url-pattern> web-resource-collection> ecurity-constraint>//謮取 signon-config.xml protectedResourcesURL = config.getServletContext().getResource("/WEB-INF/signon-config.xml"); SignOnDAO dao = new SignOnDAO(protectedResourcesURL); //讀取登入失敗畫面(signon_error.screen) signOnErrorPage = dao.getSignOnErrorPage(); //讀取登入畫面(signon.screen) signOnPage = dao.getSignOnPage(); //讀取所有欲保護畫面，組成 HashMap protectedResources = dao.getProtectedResources(); } catch (java.net.MalformedURLException ex) { System.err.println("SignonFilter: malformed URL exception: " + ex); } } 它在初始化時會先讀取 Petstore_home\src\apps\petstore\src\docroot\WEB-INF\signon-config.xml，並組成 Data Access Object(DAO)，以方便後續程式存取(註 3)，此 xml 檔案主要功用記 錄登入畫面、登入失敗畫面及所有需登入才能使用的畫面之 URL，以下是 signon-config.xml 片段： <signon-config> <!-- Form Sign On Page(登入畫面)--> <signon-form-login-page> signon.screen </signon-form-login-page> <!-- Error Page When Sign On fails(登入失敗畫面)--> <signon-form-error-page> signon_error.screen </signon-form-error-page> <!-- A Protected Resource--> <security-constraint> <web-resource-collection> <web-resource-name>Customer Screen</web-resource-name> <url-pattern>customer.screen</url-pattern> </web-resource-collection> </security-constraint>