Java
Programming Secure FTP in Java
by Frank Kim on Feb.21, 2011, under Java SE
Often server applications need to upload or download files using FTP. But in this age of increasing security awareness vendors are now asking this be done using SFTP (Secure FTP).
Fortunately this is not difficult using the JSch (Java Secure Channel) library. The downloadable JSch archive includes numerous examples. I used the Sftp.java to implement SFTP for my server application.
Starting a connection to an SFTP server using JSch is somewhat simple.
JSch jsch = new JSch();
// start session
session = jsch.getSession(username, host);
// specify our own user info to accept secure connection to FTP server
UserInfo ui = new MyUserInfo(host);
session.setUserInfo(ui);
// set password
session.setPassword(password);
// connect
session.connect();
// get SFTP channel
Channel channel = session.openChannel("sftp");
channel.connect();
schannel = (ChannelSftp) channel;
The trick is getting past confirmation of the authenticity of the host. I do this my creating my own UserInfo implementation, MyUserInfo, which knows about the host I am connecting to. The only method I implement is the promptYesNo method which simply checks if the message is asking about the host I want to connect to.
protected MyUserInfo(final String pKnownHost) {
this.mKnownHost = pKnownHost;
}
@Override
public boolean promptYesNo(final String pMessage) {
// message looks like this "The authenticity of host 'foo.com' can't be established..."
final int start = pMessage.indexOf("'") + 1;
final int end = pMessage.indexOf("'", start);
final String host = pMessage.substring(start, end);
// is the host a known host?
return this.mKnownHost.equals(host);
}
Now uploading is trivial.
schannel.put(src, dest);
For further reading please see Java: What is the best way to SFTP a file from a server.
Testing Which Page Loaded your JSP Page Fragment
by Frank Kim on Feb.01, 2010, under JSTL
Sometimes you want to check in your JSP page fragment which page loaded it. Fortunately this is simple with JSTL.
<c:if test="${fn:indexOf(pageContext.request.requestURI,'foo.jsp') != -1}">
The request URI ${pageContext.request.requestURI} contains foo.jsp.
</c:if>
Simple but something I always forget how to do.
URLEncoder.encode is Deprecated So What Do I Use for Encoding?
by Frank Kim on Oct.31, 2009, under Java SE
(Photo: The Surface by Daniel*1977)
URLEncoder.encode(String url) is deprecated. Java wants you to use URLEncoder.encode(String url, String enc). But what do you put for the encoding parameter? I always forget which is the whole point of this post.
URLEncoder.encode(url, "UTF-8");
Also on Windows if you want you can do:
URLEncoder.encode(url, "Cp1252");
For further reading please see default encoding of a jvm.
Using ResourceBundle and MessageFormat for Error Messages
by Frank Kim on Sep.07, 2009, under Java SE
When generating error messages, two Java utility classes, ResourceBundle and MessageFormat, are extremely practical and powerful. From the ResourceBundle JavaDoc:
Resource bundles contain locale-specific objects. When your program needs a locale-specific resource, a
Stringfor example, your program can load it from the resource bundle that is appropriate for the current user’s locale. In this way, you can write program code that is largely independent of the user’s locale isolating most, if not all, of the locale-specific information in resource bundles.This allows you to write programs that can:
- be easily localized, or translated, into different languages
- handle multiple locales at once
- be easily modified later to support even more locales
And from the MessageFormat JavaDoc:
MessageFormatprovides a means to produce concatenated messages in a language-neutral way. Use this to construct messages displayed for end users.
MessageFormattakes a set of objects, formats them, then inserts the formatted strings into the pattern at the appropriate places.
This is an example of an error message resource bundle, ErrorMessagesResources.properties.
userAlreadyExists=A user already exists with the name {0}.
passwordInvalid=Please enter a valid password.
This is an example of how you would use this resource bundle.
protected static final ResourceBundle resourceBundle =
ResourceBundle.getBundle("com.betweengo.ErrorMessageResources");
public boolean handleLogin(DynamoHttpServletRequest pReq, DynamoHttpServletResponse pRes) {
...
// user already exists
String errMsg1 = resourceBundle.getString("userAlreadyExists");
errMsg1 = MessageFormat.format(errMsg1, userName);
...
// password invalid
String errMsg2 = resourceBundle.getString("passwordInvalid");
...
}
Enums in Java
by Frank Kim on Sep.02, 2009, under Java SE

(Photo: Slide-together : now with cards by fdecomite)
Enums are highly useful data types introduced in Java SE 5.0. Though I love using them I often forget the exact syntax so this post is to remind me later how to use it.
public enum Example {
FOO,BAR
}
// create one using its name
Example myExample = Example.valueOf(“bar”.toUpperCase());
// if statement
if (myExample == Example.FOO) System.out.println(“FOO!”);
// switch statement
switch (myExample) {
case FOO: System.out.println(“FOO!”);
case BAR: System.out.println(“BAR!”);
}
// output as String using name
System.out.println(myExample.name());
For further reading please see Java’s Enums guide and Enum Types (The Java™ Tutorials > Learning the Java Language > Classes and Objects).
Unit Test for Threaded Logging
by Frank Kim on May.04, 2009, under Java SE, Logging
Brian Ploetz sent me this great unit test for threaded logging. In it we are trying to find if a deadlock occurs.
import java.lang.management.ManagementFactory;
import java.lang.management.ThreadInfo;
import java.lang.management.ThreadMXBean;
import junit.framework.TestCase;
import org.apache.commons.logging.Log;
import org.apache.commons.logging.LogFactory;
import org.apache.log4j.Appender;
import org.apache.log4j.Logger;
/**
* Unit test for the ThrottlingFilter in a multi-threaded environment
*/
public class ThrottlingFilterThreadUTest extends TestCase {
private static final Log logger = LogFactory.getLog(ThrottlingFilterThreadUTest.class);
private static ThreadMXBean threadMXBean;
@Override
protected void setUp() throws Exception {
super.setUp();
threadMXBean = ManagementFactory.getThreadMXBean();
logger.info("Thread contention monitoring supported: "
+ threadMXBean.isThreadContentionMonitoringSupported());
logger.info("Thread contention monitoring enabled: "
+ threadMXBean.isThreadContentionMonitoringEnabled());
threadMXBean.setThreadContentionMonitoringEnabled(true);
logger.info("Thread contention monitoring enabled: "
+ threadMXBean.isThreadContentionMonitoringEnabled());
}
/**
* Tests multiple threads using the same filter instance at the same time
*/
public void testThreads() {
Logger rootLogger = Logger.getRootLogger();
assertNotNull(rootLogger);
Appender fileAppender = rootLogger.getAppender("FILE");
assertNotNull(fileAppender);
ThrottlingFilter throttlingFilter = (ThrottlingFilter) fileAppender.getFilter();
assertNotNull(throttlingFilter);
ThreadGroup infoThreadGroup = new ThreadGroup("info-group");
ThreadGroup errorThreadGroup = new ThreadGroup("error-group");
Thread errorThread1 = new ErrorThread(errorThreadGroup, "error-thread-1");
Thread infoThread1 = new InfoThread(infoThreadGroup, "info-thread-1");
Thread errorThread2 = new ErrorThread(errorThreadGroup, "error-thread-2");
Thread infoThread2 = new InfoThread(infoThreadGroup, "info-thread-2");
infoThread1.start();
errorThread1.start();
errorThread2.start();
infoThread2.start();
while (true) {
ThreadInfo[] threadInfos = threadMXBean.getThreadInfo(threadMXBean.getAllThreadIds());
for (int i = 0; i < threadInfos.length; i++) {
ThreadInfo threadInfo = threadInfos[i];
if (threadInfo != null && threadInfo.getThreadState() == Thread.State.BLOCKED) {
System.out.println("Thread '" + threadInfo.getThreadName()
+ "' is blocked on the monitor lock '" + threadInfo.getLockName()
+ "' held by thread '" + threadInfo.getLockOwnerName() + "'");
}
}
if (!infoThread1.isAlive() && !errorThread1.isAlive() && !infoThread2.isAlive()
&& !errorThread2.isAlive())
break;
}
}
public static class ErrorThread extends Thread {
private static final Log logger = LogFactory.getLog(ErrorThread.class);
public ErrorThread(ThreadGroup tg, String name) {
super(tg, name);
}
public void run() {
for (int i = 0; i < 10; i++) {
try {
test(0);
} catch (Exception e) {
long start = System.currentTimeMillis();
logger.error("Error!", e);
long end = System.currentTimeMillis();
System.out.println("Took " + (end-start) + "ms to log error");
}
}
}
// simulate large stack traces
private void test(int i) {
if (i >= 500)
throw new RuntimeException("D'OH!");
test(i+1);
}
}
public static class InfoThread extends Thread {
private static final Log logger = LogFactory.getLog(InfoThread.class);
public InfoThread(ThreadGroup tg, String name) {
super(tg, name);
}
public void run() {
for (int i = 0; i < 100; i++) {
logger.info("Hi!");
}
}
}
}
The log4j.xml test file.
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE log4j:configuration SYSTEM "log4j.dtd">
<log4j:configuration xmlns:log4j="http://jakarta.apache.org/log4j/"
debug="false">
<!-- ================================= -->
<!-- Appenders -->
<!-- ================================= -->
<!-- A time/date based rolling file appender -->
<appender name="FILE"
class="org.apache.log4j.DailyRollingFileAppender">
<param name="File" value="server.log" />
<param name="Append" value="true" />
<!-- Rollover at midnight each day -->
<param name="DatePattern" value="'.'yyyy-MM-dd" />
<layout class="org.apache.log4j.PatternLayout">
<!-- The default pattern: Date Priority [Category] Message\n -->
<param name="ConversionPattern" value="%d %-5p [%c] %m%n" />
</layout>
<filter class="com.betweengo.log4j.ThrottlingFilter">
<param name="maxCountSameMessage" value="100"/>
<param name="maxCountSavedMessages" value="100"/>
<param name="waitInterval" value="60"/>
</filter>
</appender>
<!-- ======================= -->
<!-- Setup the Root category -->
<!-- ======================= -->
<root>
<level value="INFO" />
<appender-ref ref="FILE" />
</root>
</log4j:configuration>
Get JSTL Vars from PageContext
by Frank Kim on May.04, 2009, under JSTL
JSTL sets its vars in the pageContext. For example:
pageContext.setAttribute("foo", bar);
Therefore to get a JSTL variable use the pageContext within a tag or a JSP page. For example:
// get item from pageContext and put in request
atg.servlet.DynamoHttpServletRequest drequest = atg.servlet.ServletUtil.getDynamoRequest(request);
drequest.setParameter("foo", pageContext.getAttribute("foo"));
Note that getAttribute assumes the variable is in the page scope. If you want to get a variable from for example the request scope you would do this.
pageContext.getAttribute("foo", javax.servlet.PageContext.REQUEST_SCOPE);
For further reading please see PageContext.
Getting the request parameter
by Frank Kim on Apr.10, 2009, under JSTL, Page Development
I always forget how to do this so I thought I should write it down.
In JSP:
<%=request.getParameter("foo")%>
<img src="<%=request.getParameter("foo")%>">
In JSTL:
<c:out value="${param.foo}"/>
In DSP:
<dspel:valueof param="foo"/>
Encode URI
by Frank Kim on Mar.17, 2009, under Java SE
To encode an URI you can simply use Java’s URLEncoder’s encode method which has been available since JDK 1.4.
String encodedUri;
try {
encodedUri = URLEncoder.encode(uri, "UTF-8");
}
catch (UnsupportedEncodingException exc) {
// this should never happen
logger.warn("UTF-8 is not a supported encoding? Not encoding for now...", exc);
encodedUri = uri;
}
Dynamically generate sitemap.xml
by Frank Kim on Mar.02, 2009, under Servlet
sitemap.xml is a top level document on your website “for webmasters to inform search engines about pages on their sites that are available for crawling.” Google not surprisingly has its own documentation on how to improve your site’s visibility using sitemap.xml.
Typically sitemap.xml is a static file that is hand generated. But on large sites it makes more sense to generate this dynamically. One way to do this is to generate it on demand using a servlet. Here is my simple solution. I did not include the implementation for outputPages() since that will be specific to each application server’s DB hierarchy or web server’s file structure.
public class SiteMap extends HttpServlet {
protected static final String MIME_TYPE_XML = "application/xml";
// XML tags
protected static final String SITE_MAP_XML_INFO = "<?xml version=\"1.0\" encoding=\"UTF-8\"?>";
protected static final String SITE_MAP_BEGIN =
"<urlset\n\txmlns=\"http://www.sitemaps.org/schemas/sitemap/0.9\"\n\txmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\"\n\txsi:schemaLocation=\"http://www.sitemaps.org/schemas/sitemap/0.9\n\t\thttp://www.sitemaps.org/schemas/sitemap/0.9/sitemap.xsd\">";
protected static final String SITE_MAP_END = "</urlset>";
protected static final String LOC_BEGIN = " <loc>";
protected static final String LOC_END = "</loc>";
protected static final String PRIORITY_BEGIN = " <priority>";
protected static final String PRIORITY_END = "</priority>";
protected static final String URL_BEGIN = "<url>";
protected static final String URL_END = "</url>";
@Override
public void doGet(HttpServletRequest request, HttpServletResponse response) throws IOException {
// set content type to be XML
response.setContentType(MIME_TYPE_XML);
// get writer
PrintWriter out = response.getWriter();
// output header
out.println(SITE_MAP_XML_INFO);
out.println(SITE_MAP_BEGIN);
// output pages
outputPages(request, out);
// output end
out.println(SITE_MAP_END);
out.close();
}
protected void outputPage(String uri, String priority, PrintWriter out, String urlStart) {
out.println(URL_BEGIN);
out.println(LOC_BEGIN + urlStart + uri + LOC_END);
out.println(PRIORITY_BEGIN + priority + PRIORITY_END);
out.println(URL_END);
}
}
Then you configure web.xml to use the SiteMap servlet.
<servlet>
<servlet-name>sitemap</servlet-name>
<servlet-class>com.upromise.olm.app.servlet.SiteMap</servlet-class>
</servlet>
<servlet-mapping>
<servlet-name>sitemap</servlet-name>
<url-pattern>/sitemap.xml</url-pattern>
</servlet-mapping>

