For detail WAF in petstore
I can u give u idea that how your webtire is gonna worked.
Every request passes through Filter class
In petstore SignOnFilter and Encoding Filter.
>SignOnFilter Class validate login and creating login by using stateless end entity beans.
>Also SignOnDAO class by reading signon signon.config file identifies protected and unprotected resources.
>Then request chains to EncodingFilter and then
to MainServlet for .do type or TemplateServlet
for .screen type.
For this web container internally uses mappings.xml file.This file is parsed by
using XMLDAO.
>.do request furture processes to appropriate htmlaction class
>If any ejb action is required then it generates
event and then event will pass to the EJBController class through WebController class.
The event object may be considered as a transfer objectst.
>now ejbController identifes which ejb action should be taken.
>for generating the screen ScreenFlowHandler class
uses screendefiniton.xml file which is parsed by
the corresponding dao class.
>then it is redirect to the Template
servlet.
which then generate the appropriate jsp page by
using template.jsp file.
>and also all the request with the .screen extenstion goes directly to the TemplateServlet.
Then