OpenShift: hello, cloud!

	<!-- JSF mapping -->
	<servlet>
		<servlet-name>Faces Servlet</servlet-name>
		<servlet-class>javax.faces.webapp.FacesServlet</servlet-class>
		<load-on-startup>1</load-on-startup>
	</servlet>
	<servlet-mapping>
		<servlet-name>Faces Servlet</servlet-name>
		<url-pattern>*.xhtml</url-pattern>
	</servlet-mapping>
	
	<!-- security -->
	<login-config>
		<auth-method>FORM</auth-method>
		<realm-name>app-auth</realm-name>
		<form-login-config>
			<form-login-page>/login.xhtml</form-login-page>
			<form-error-page>/login.xhtml</form-error-page>
		</form-login-config>
	</login-config>
	<security-role>
		<role-name>Admin</role-name>
	</security-role>
	<security-role>
		<role-name>Manager</role-name>
	</security-role>

	<security-constraint>
		<web-resource-collection>
			<web-resource-name>Admin Part</web-resource-name>
			<url-pattern>/admin/*</url-pattern>
			<http-method>GET</http-method>
			<http-method>POST</http-method>
		</web-resource-collection>
		<auth-constraint>
			<role-name>Admin</role-name>
		</auth-constraint>
	</security-constraint>
	<security-constraint>
		<web-resource-collection>
			<web-resource-name>All Users</web-resource-name>
			<url-pattern>/view/*</url-pattern>
		</web-resource-collection>
		<auth-constraint>
			<role-name>*</role-name>
		</auth-constraint>
		<user-data-constraint>
			<transport-guarantee>NONE</transport-guarantee>
		</user-data-constraint>
	</security-constraint>
	
	<!-- инициализация -->
	<listener>
		<listener-class>my.app.jaas.Initializer</listener-class>
	</listener>

		<dependency>
			<groupId>org.hibernate</groupId>
			<artifactId>hibernate-core</artifactId>
			<version>4.0.1.Final</version>
			<scope>provided</scope>
		</dependency>
		<dependency>
			<groupId>org.richfaces.core</groupId>
			<artifactId>richfaces-core-impl</artifactId>
			<version>4.2.2.Final</version>
			<scope>runtime</scope>
		</dependency>
		<dependency>
			<groupId>org.richfaces.ui</groupId>
			<artifactId>richfaces-components-ui</artifactId>
			<version>4.2.2.Final</version>
			<scope>runtime</scope>
		</dependency>
		<dependency>
			<groupId>commons-codec</groupId>
			<artifactId>commons-codec</artifactId>
			<version>1.6</version>
		</dependency>

<?xml version="1.0" encoding="UTF-8"?>
<persistence version="2.0"
	xmlns="http://java.sun.com/xml/ns/persistence" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
	xsi:schemaLocation="http://java.sun.com/xml/ns/persistence http://java.sun.com/xml/ns/persistence/persistence_2_0.xsd">
	<persistence-unit name="test">
		<properties>
			<property name="hibernate.ejb.cfgfile" value="/hibernate.cfg.xml" />
		</properties>
	</persistence-unit>
</persistence>

<?xml version="1.0" encoding="utf-8"?>
<!DOCTYPE hibernate-configuration PUBLIC 
	"-//Hibernate/Hibernate Configuration DTD 3.0//EN"
	"http://hibernate.sourceforge.net/hibernate-configuration-3.0.dtd">
<hibernate-configuration>
	<session-factory name="">
		<property name="hibernate.dialect">org.hibernate.dialect.MySQLDialect</property>
		<property name="hibernate.format_sql">true</property>
		<property name="hibernate.show_sql">false</property>
		<property name="hibernate.hbm2ddl.auto">update</property>
		<property name="hibernate.connection.datasource">java:jboss/datasources/MysqlDS</property>
	</session-factory>
</hibernate-configuration>

import java.util.*;
import javax.persistence.*;

@ Entity
@ Table(name = "APP_USER", uniqueConstraints = @ UniqueConstraint(columnNames = "USER_NAME"))
public class AppUser implements java.io.Serializable {

	private Long userId;
	private String userName;
	private String displayName;
	private String pwd;
	private Boolean enabled;
	private Set<AppRole> roles = new HashSet<AppRole>(0);

	@ TableGenerator(
			name = "UserIdGen",
			table = "APP_GEN",
			pkColumnName = "GEN_NAME", 
			pkColumnValue = "USER_ID", 
			valueColumnName = "GEN_VAL", 
			allocationSize = 10)

	@ Id
	@ Column(name = "USER_ID", nullable = false)
	@ GeneratedValue(strategy=GenerationType.TABLE, generator="UserIdGen")	
	public Long getUserId() {
		return this.userId;
	}
	public void setUserId(Long userId) {
		this.userId = userId;
	}

	@ Column(name = "USER_NAME", nullable = false, length = 30)
	public String getUserName() {
		return this.userName;
	}
	public void setUserName(String userName) {
		this.userName = userName;
	}

	@ Column(name = "DISPLAY_NAME", length = 250)
	public String getDisplayName() {
		return this.displayName;
	}
	public void setDisplayName(String displayName) {
		this.displayName = displayName;
	}

	@ Column(name = "PWD", length = 30)
	public String getPwd() {
		return this.pwd;
	}
	public void setPwd(String pwd) {
		this.pwd = pwd;
	}

	@ Column(name = "ENABLED")
	public Boolean getEnabled() {
		return this.enabled;
	}
	public void setEnabled(Boolean enabled) {
		this.enabled = enabled;
	}

	@ ManyToMany(fetch = FetchType.LAZY, cascade=CascadeType.ALL)
	@ JoinTable(
			name = "APP_MEMBERSHIP", 
			joinColumns = { 
					@ JoinColumn(name = "USER_ID", nullable = false, updatable = false)
			},
			inverseJoinColumns = { 
					@ JoinColumn(name = "ROLE_ID", nullable = false, updatable = false) 
			})
	public Set<AppRole> getRoles() {
		return this.roles;
	}
	public void setRoles(Set<AppRole> roles) {
		this.roles = roles;
	}
}

import java.util.*;
import javax.persistence.*;

@ Entity
@ Table(name = "APP_ROLE", uniqueConstraints = @ UniqueConstraint(columnNames = "ROLE_NAME"))
public class AppRole implements java.io.Serializable {

	private Long roleId;
	private String roleName;
	private String displayName;
	private Set<AppUser> users = new HashSet<AppUser>(0);

	@ TableGenerator(
			name = "RoleIdGen",
			table = "APP_GEN",
			pkColumnName = "GEN_NAME", 
			pkColumnValue = "ROLE_ID", 
			valueColumnName = "GEN_VAL", 
			allocationSize = 10)

	@ Id
	@ Column(name = "ROLE_ID", nullable = false)
	@ GeneratedValue(strategy=GenerationType.TABLE, generator="RoleIdGen")	
	public Long getRoleId() {
		return this.roleId;
	}
	public void setRoleId(Long roleId) {
		this.roleId = roleId;
	}

	@ Column(name = "ROLE_NAME", length = 30)
	public String getRoleName() {
		return this.roleName;
	}
	public void setRoleName(String roleName) {
		this.roleName = roleName;
	}

	@ Column(name = "DISPLAY_NAME", length = 250)
	public String getDisplayName() {
		return this.displayName;
	}
	public void setDisplayName(String displayName) {
		this.displayName = displayName;
	}

	@ ManyToMany(fetch = FetchType.LAZY, mappedBy = "roles")
	public Set<AppUser> getUsers() {
		return this.users;
	}
	public void setUsers(Set<AppUser> users) {
		this.users = users;
	}
}

@ ManagedBean
public class Initializer implements ServletContextListener  {

    private static final Logger log = Logger.getLogger(Initializer.class);

	@Override
	public void contextDestroyed(ServletContextEvent event) {}

	@Override
	public void contextInitialized(ServletContextEvent event) {
		loadData();
	}

	@ PersistenceContext
	EntityManager em;

	private AppRole checkRole(String roleName, String displayName, Session session) {
		AppRole role =
				(AppRole)session.createCriteria(AppRole.class)
				.add(Restrictions.eq("roleName", roleName))
				.uniqueResult();
		if (role == null) {
			role = new AppRole();
			role.setRoleName(roleName);
			role.setDisplayName(displayName);
			session.save(role);
		}
		return role;
	}

	private void loadData() {
		Session session = (Session) em.getDelegate();
		
		AppRole adminRole = checkRole("Admin", "Администраторы", session);
		checkRole("Manager", "Менеджеры", session);

		if (adminRole.getUsers().size()==0) {
			AppUser user = 
					(AppUser)session.createCriteria(AppUser.class)
					.add(Restrictions.eq("userName", "admin"))
					.uniqueResult();
			if(user==null) {
				user = new AppUser();
				user.setUserName("admin");
				user.setDisplayName("Администратор");
				user.setPwd(encode("topsecret"));
				user.setEnabled(true);
				session.save(user);
			}
			adminRole.getUsers().add(user);//nothing
			user.getRoles().add(adminRole);
			session.save(adminRole);
			session.save(user);
		}
		session.flush();
		session.close();
	}

	public static String encode(String value) {
		//get the message digest
		try{
			MessageDigest md = MessageDigest.getInstance("SHA"); //SHA-1 algorithm
			md.update(value.getBytes("UTF-8")); //byte-representation using UTF-8 encoding format
			byte raw[] = md.digest();
			String hash = Base64.encodeBase64String(raw).trim();
			return hash;
		} catch(Exception e) {
			log.error(e, e);
		}

		return value;
	}

	public String logout() {
		FacesContext ctx = FacesContext.getCurrentInstance();
		HttpSession session = (HttpSession)ctx.getExternalContext().getSession(false);
		session.invalidate();
		return("logout");
	}

}

<html xmlns="http://www.w3.org/1999/xhtml"
	xmlns:a4j="http://richfaces.org/a4j"
	xmlns:rich="http://richfaces.org/rich"
	xmlns:f="http://java.sun.com/jsf/core"
	xmlns:ui="http://java.sun.com/jsf/facelets"
	xmlns:c="http://java.sun.com/jsp/jstl/core"
	xmlns:h="http://java.sun.com/jsf/html">
<h:head>
	<title>Вход в систему</title>
	<h:outputStylesheet>
div.login-container {
	width: 255px;
	position: relative;
	margin: 0 auto 0 auto;
}
	</h:outputStylesheet>
</h:head>
<h:body>
	<div class="login-container" id="login_container">
		<rich:panel>
			<f:facet name="header">
				<h:outputText value="Вход в систему" />
			</f:facet>
			<form method="post" action="j_security_check" name="loginform"
				id="loginForm" target="_parent">
				<h:panelGrid columns="2" cellpadding="2"
					columnClasses="right,left" width="100%">
					<h:outputLabel for="j_username" value="Логин:" />
					<h:inputText style="width: 155px;" 
						id="j_username" value="" />
					<h:outputLabel for="j_password" value="Пароль:" />
					<h:inputSecret style="width: 155px;" 
						id="j_password" value="" />

					<h:panelGroup />
					<h:panelGroup />
					<h:panelGroup />
					<h:panelGroup>
						<h:commandButton name="login" id="login-submit" value="Вход" />
						<h:outputText value=" " escape="false"/>
						<h:commandButton type="button" id="login-cancel"
							value="Отмена" />
					</h:panelGroup>
				</h:panelGrid>
			</form>
		</rich:panel>
	</div>
	<h:outputScript>
(function(){
	jQuery("#login_container").offset({top:Math.max(0,(jQuery(window).height()/2)-150)});
	var el = jQuery("#j_username").get(0);el.focus();el.select();
})();
	</h:outputScript>
</h:body>
</html>