Login User

[kalars2k]

Story Description

As a Seeker/Adviser I want to login to the Forum So that I can post my questions/answers

Acceptance Criteria

Given that I have submitted the URL for the site, when I reach the first page of the site, then I should see the authentication page where I Can enter my username and password

Given that I am on the login page, when I enter my username and password, then I want to be directed to my Activity Wall.

Given that I am on the login page, When I enter my password wrong, then I want to see a validation telling me that the username or password is incorrect

Given that I am on the login page, When I enter my username wrong, then I want to see a validation telling me that the username or password is incorrect

This AC is not needed Given that I am on the first page of the site, when I click on the login button then I should be directed to an authentication page where I can enter my username and password

(This AC is moved to story 38 - removed from scope) Given that I am on the login page When I enter my username/password wrong for 3 consecutive times then I should be blocked for 30 mins from trying to login I should also see a validation telling me that I am blocked for the next 30 mins

Tasks:

• Add login button to the home page. - not needed
• Clicking of login button should redirect to login page. - not needed
• In the login page, add text field for username, password field for password & login button.--done
• Create a table for storing user credentials (username, password, etc)--done
• Add test user to test data script for testing purposes.--done
• Find the way how to validate username and password(spring security,servelet filter,spring interceptor) --done
• On click of login button, validate the username and password with the database --done
  • On successful login, redirect to activity wall. --done
  • On unsuccessful login, show the error message on login page.

Spring Security tasks

1. Add basic configuration to restrict public access to all pages except login --done
2. Validate username password with users in database --done
3. Check session across tabs in browser --done
4. Password encryption

[kalars2k]

Devlopment Started 19/3/2013 - Sandeep/Gaurav

[kalars2k]

updated AC - excluded need for a login button, before authentication page