Back to Projects

Java Servlet MVC Auth System

Handles 100+ concurrent sessions, secure against SQL injection

Educational authentication system built from scratch to understand core servlet concepts without high-level frameworks like Spring Boot. Implements secure user registration and login with SHA-256 password hashing, session management, and backend validation. Follows strict MVC architecture with Servlets as Controllers, JSP as Views, and POJOs as Models. Uses SLF4J for production-grade logging instead of System.out.println. Demonstrates understanding of fundamental Java web development before framework abstraction.

Java 25Java ServletsJSPJDBCMySQLMavenSLF4JApache Tomcat
GitHub

Problem

Need to understand how authentication actually works at the servlet level before jumping to Spring Security abstractions

Solution

Built complete auth system from scratch with secure password hashing, session management, and MVC separation of concerns

Key Highlights

  • ●SHA-256 password hashing (no plaintext storage)
  • ●Strict MVC architecture without frameworks
  • ●Raw JDBC with prepared statements
  • ●Session-based authentication
  • ●Professional SLF4J logging