Spring Security

Authentication with
JSF (Java Server Faces)
(Using Maven Project in
Eclipse IDE)

Create New Maven Project

Create a new simple Maven Project in Eclipse. You can search the docmentation for the same
online.

Create pom.xml (replace XXXX with your desired value)

<project xmlns="http://maven.apache.org/POM/4.0.0"
xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
xsi:schemaLocation="http://maven.apache.org/POM/4.0.0
http://maven.apache.org/xsd/maven-4.0.0.xsd">
<modelVersion>4.0.0</modelVersion>
<groupId>org.XXXX</groupId>
<artifactId>XXXX</artifactId>
<version>0.0.1-SNAPSHOT</version>
<packaging>war</packaging>
<name>XXXX</name>
<description>XXXX</description>
<properties>
<org.richfaces.bom.version>4.3.3.Final</org.richfaces.bom.version>
<maven.compiler.source>1.7</maven.compiler.source>
<maven.compiler.target>1.7</maven.compiler.target>
</properties>
<dependencyManagement>
<dependencies>
<dependency>
<groupId>org.richfaces</groupId>
<artifactId>richfaces-bom</artifactId>
<version>${org.richfaces.bom.version}</version>
<type>pom</type>
<scope>import</scope>
</dependency>
</dependencies>
</dependencyManagement>
<dependencies>
<dependency>
<groupId>org.richfaces.ui</groupId>
<artifactId>richfaces-components-ui</artifactId>
</dependency>
<dependency>
<groupId>org.richfaces.core</groupId>
<artifactId>richfaces-core-impl</artifactId>
</dependency>
<dependency>
<groupId>javax.faces</groupId>
<artifactId>javax.faces-api</artifactId>
</dependency>
<dependency>
<groupId>org.glassfish</groupId>

<artifactId>javax.faces</artifactId>
</dependency>
<dependency>
<groupId>javax.servlet</groupId>
<artifactId>javax.servlet-api</artifactId>
<scope>provided</scope>
</dependency>
<dependency>
<groupId>javax.servlet</groupId>
<artifactId>jstl</artifactId>
<version>1.2</version>
</dependency>
<dependency>
<groupId>mysql</groupId>
<artifactId>mysql-connector-java</artifactId>
<version>5.1.20</version>
</dependency>
<dependency>
<groupId>junit</groupId>
<artifactId>junit</artifactId>
<version>4.11</version>
</dependency>
<dependency>
<groupId>net.sourceforge.jexcelapi</groupId>
<artifactId>jxl</artifactId>
<version>2.6</version>
</dependency>
<dependency>
<groupId>org.springframework</groupId>
<artifactId>spring-core</artifactId>
<version>3.2.12.RELEASE</version>
</dependency>
<dependency>
<groupId>org.springframework</groupId>
<artifactId>spring-beans</artifactId>
<version>3.2.12.RELEASE</version>
</dependency>
<dependency>
<groupId>org.springframework</groupId>
<artifactId>spring-aop</artifactId>
<version>3.2.12.RELEASE</version>
</dependency>
<dependency>
<groupId>org.springframework</groupId>
<artifactId>spring-orm</artifactId>
<version>3.2.12.RELEASE</version>
</dependency>
<dependency>
<groupId>org.springframework.security</groupId>
<artifactId>spring-security-config</artifactId>
<version>3.2.5.RELEASE</version>
</dependency>

<dependency>
<groupId>org.springframework.security</groupId>
<artifactId>spring-security-web</artifactId>
<version>3.2.5.RELEASE</version>
</dependency>
<dependency>
<groupId>org.springframework</groupId>
<artifactId>spring-instrument-tomcat</artifactId>
<version>3.2.12.RELEASE</version>
</dependency>
<dependency>
<groupId>org.springframework</groupId>
<artifactId>spring-tx</artifactId>
<version>3.2.12.RELEASE</version>
</dependency>
</dependencies>
<build>
<resources>
<resource>
<filtering>true</filtering>
<directory>src/test/resources</directory>
<includes>
<include>**/*.properties</include>
</includes>
<excludes>
<exclude>**/*local.properties</exclude>
</excludes>
</resource>
<resource>
<directory>src\main\resources</directory>
<includes>
<include>**/*.properties</include>
<include>**/*.xml</include>
<include>**/*.vm</include>
</includes>
</resource>
</resources>
<plugins>
<plugin>
<groupId>org.apache.maven.plugins</groupId>
<artifactId>maven-surefire-plugin</artifactId>
<configuration>
<additionalClasspathElements>
<additionalClasspathElement>src\main\webapp\WEBINF</additionalClasspathElement>
</additionalClasspathElements>
</configuration>
</plugin>
<plugin>
<groupId>org.apache.tomcat.maven</groupId>
<artifactId>tomcat7-maven-plugin</artifactId>
<version>2.0</version>
<configuration>
<server>devserver</server>
</configuration>
</plugin>

<plugin>
<groupId>org.apache.maven.plugins</groupId>
<artifactId>maven-war-plugin</artifactId>
<configuration>
<webXml>src\main\webapp\WEB-INF\web.xml</webXml>
</configuration>
</plugin>
</plugins>
</build>
</project>

This should automatically start downloading maven jar files related to the
pom.xml entries. If not, then
1) right click on project from project explorer
2) select Run As -> Maven Install

web.xml (replace XXXX with your desired value)

<?xml version="1.0" encoding="UTF-8"?>
<web-app version="2.5" xmlns="http://java.sun.com/xml/ns/javaee"
xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
xsi:schemaLocation="http://java.sun.com/xml/ns/javaee
http://java.sun.com/xml/ns/javaee/web-app_2_5.xsd">
<description>XXXX</description>
<display-name>XXXX</display-name>
<context-param>
<param-name>com.sun.faces.sendPoweredByHeader</param-name>
<param-value>false</param-value>
</context-param>
<context-param>
<param-name>com.sun.faces.disableUnicodeEscaping</param-name>
<param-value>auto</param-value>
</context-param>
<context-param>
<param-name>com.sun.faces.externalizeJavaScript</param-name>
<param-value>true</param-value>
</context-param>
<context-param>
<param-name>javax.faces.application.CONFIG_FILES</param-name>
<param-value>/WEB-INF/faces-config.xml</param-value>
</context-param>
<context-param>
<param-name>javax.faces.DEFAULT_SUFFIX</param-name>
<param-value>.xhtml</param-value>
</context-param>
<context-param>
<param-name>org.richfaces.enableControlSkinning</param-name>
<param-value>true</param-value>
</context-param>
<context-param>
<param-name>org.richfaces.resourceOptimization.enabled</param-name>
<param-value>true</param-value>
</context-param>
<context-param>
<param-name>org.richfaces.skin</param-name>
<param-value>blueSky</param-value>
</context-param>

<servlet>
<servlet-name>Faces Servlet</servlet-name>
<servlet-class>javax.faces.webapp.FacesServlet</servlet-class>
<load-on-startup>1</load-on-startup>
</servlet>
<servlet-mapping>
<servlet-name>Faces Servlet</servlet-name>
<url-pattern>*.faces</url-pattern>
</servlet-mapping>
<servlet-mapping>
<servlet-name>Faces Servlet</servlet-name>
<url-pattern>/faces/*</url-pattern>
</servlet-mapping>
<welcome-file-list>
<welcome-file>login.faces</welcome-file>
</welcome-file-list>
<session-config>
<session-timeout>30</session-timeout>
</session-config>
<filter>
<filter-name>springSecurityFilterChain</filter-name>
<filterclass>org.springframework.web.filter.DelegatingFilterProxy</filter-class>
</filter>
<filter-mapping>
<filter-name>springSecurityFilterChain</filter-name>
<url-pattern>/*</url-pattern>
</filter-mapping>
<context-param>
<param-name>contextConfigLocation</param-name>
<param-value>
/WEB-INF/security-context.xml</param-value>
</context-param>
<listener>
<listenerclass>org.springframework.web.context.ContextLoaderListener</listener-class>
</listener>
</web-app>

security-context.xml (Spring Security configuration)

I am using plaintext password (no hashing and salting) for this example.
<beans:beans xmlns="http://www.springframework.org/schema/security"
xmlns:beans="http://www.springframework.org/schema/beans"
xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
xmlns:context="http://www.springframework.org/schema/context"
xmlns:aop="http://www.springframework.org/schema/aop"

xsi:schemaLocation="http://www.springframework.org/schema/aop
http://www.springframework.org/schema/aop/spring-aop-3.2.xsd
http://www.springframework.org/schema/security
http://www.springframework.org/schema/security/spring-security-3.2.xsd
http://www.springframework.org/schema/beans
http://www.springframework.org/schema/beans/spring-beans-3.2.xsd
http://www.springframework.org/schema/context
http://www.springframework.org/schema/context/spring-context-3.2.xsd">
<context:component-scan base-package="*" />
<http disable-url-rewriting="true">
<form-login login-page="/login" default-target-url="/index"
authentication-failure-url="/login" usernameparameter="username"
password-parameter="password" />
<custom-filter after="CONCURRENT_SESSION_FILTER"
ref="concurrencyFilter" />
<session-management
session-authentication-strategy-ref="sas" />
<headers />
</http>
<beans:bean id="UserDetailsManager" class="security.UserDetailsManager" />
<beans:bean id="concurrencyFilter"
class="org.springframework.security.web.session.ConcurrentSessionFilter">
<beans:property name="sessionRegistry" ref="sessionRegistry" />
<beans:property name="expiredUrl" value="/sessionExpired" />
</beans:bean>
<beans:bean id="myAuthFilter"
class="org.springframework.security.web.authentication.UsernamePasswordAuthentic
ationFilter">
<beans:property name="sessionAuthenticationStrategy"
ref="sas" />
<beans:property name="authenticationManager"
ref="authenticationManager" />
</beans:bean>
<beans:bean id="sas"
class="org.springframework.security.web.authentication.session.CompositeSessionA
uthenticationStrategy">
<beans:constructor-arg>
<beans:list>
<beans:bean
class="org.springframework.security.web.authentication.session.ConcurrentSession
ControlAuthenticationStrategy">
<beans:constructor-arg ref="sessionRegistry" />
<beans:property name="maximumSessions" value="1"
/>
<beans:property name="exceptionIfMaximumExceeded"
value="true" />
</beans:bean>
<beans:bean

class="org.springframework.security.web.authentication.session.SessionFixationPr
otectionStrategy">
</beans:bean>
<beans:bean
class="org.springframework.security.web.authentication.session.RegisterSessionAu
thenticationStrategy">
<beans:constructor-arg ref="sessionRegistry" />
</beans:bean>
</beans:list>
</beans:constructor-arg>
</beans:bean>
<beans:bean id="sessionRegistry"
class="org.springframework.security.core.session.SessionRegistryImpl" />
<!-- Select users and user_roles from database -->
<authentication-manager alias="authenticationManager">
<authentication-provider user-service-ref="UserDetailsManager">
<password-encoder hash="plaintext">
</password-encoder>
</authentication-provider>
</authentication-manager>
</beans:beans>

Maven Update, Clean and Install

1) Right click on project from project explorer
2) select Run As -> Maven Clean
3) Right click on project from project explorer
4) select Run As -> Maven Install
5) Right click on Project from project explorer
6) Select Maven-> Update Project

FacesServlet related Error

This step is a must to avoid javax.faces.webapp.FacesServlet related errors.
1) Right click on Project
2) Select Deployment Assembly
3) Add Maven Dependiencies directive

faces-config.xml (declare all managed beans and xhtml files here)

<faces-config version="2.1" xmlns="http://java.sun.com/xml/ns/javaee"
xmlns:xi="http://www.w3.org/2001/XInclude"
xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
xsi:schemaLocation="http://java.sun.com/xml/ns/javaee

http://java.sun.com/xml/ns/javaee/web-facesconfig_2_1.xsd">
<managed-bean>
<managed-bean-name>baseUIController</managed-bean-name>
<managed-bean-class>ui.BaseUIController</managed-bean-class>
<managed-bean-scope>session</managed-bean-scope>
</managed-bean>
<managed-bean>
<managed-bean-name>dbConnectionController</managed-bean-name>
<managed-bean-class>database.DbConnectionController</managed-beanclass>
<managed-bean-scope>session</managed-bean-scope>
</managed-bean>
<managed-bean>
<managed-bean-name>loginUIController</managed-bean-name>
<managed-bean-class>ui.LoginUIController</managed-bean-class>
<managed-bean-scope>session</managed-bean-scope>
<managed-property>
<property-name>authenticationService</property-name>
<value>#{authenticationService}</value>
</managed-property>
</managed-bean>
<navigation-rule>
<navigation-case>
<from-outcome>login</from-outcome>
<to-view-id>/login.xhtml</to-view-id>
<redirect />
</navigation-case>
</navigation-rule>
<navigation-rule>
<navigation-case>
<from-outcome>index</from-outcome>
<to-view-id>/index.xhtml</to-view-id>
<redirect />
</navigation-case>
</navigation-rule>
<application>
<elresolver>org.springframework.web.jsf.el.SpringBeanFacesELResolver</el-resolver>
</application>
</faces-config>

Please note that <application>....</application> tag with the mentioned details

above is very important for Spring security configuration to work.

BaseUIController.java
You can store all common methods/procedures which all controller classes will access under this
class. Controller classes will inherit this class.
package ui;
import java.io.Serializable;
import
import
import
import

javax.faces.application.FacesMessage;
javax.faces.application.FacesMessage.Severity;
javax.faces.context.FacesContext;
javax.faces.context.ExternalContext;

public class BaseUIController implements Serializable {

private static final long serialVersionUID = 1L;
private static final String appVersion = "1.0";
private String activeLink;
private String userNameParam;
/**
* @param activeLink
*
the activeLink to set
*/
/**
* @return the activeLink
*/
public String getActiveLink() {
if (FacesContext.getCurrentInstance().getExternalContext()
.getSessionMap().containsKey("ACTIVE_LINK")) {
this.activeLink = (String) FacesContext.getCurrentInstance()
.getExternalContext().getSessionMap().get("ACTIVE_
LINK");
} else {
this.activeLink = "index";
}
return activeLink;
}
public void setActiveLink(String activeLink) {
FacesContext.getCurrentInstance().getExternalContext().getSessionMap()
.put("ACTIVE_LINK", activeLink);
this.activeLink = activeLink;
}
public String getRealFileStoragePath() {
return FacesContext.getCurrentInstance().getExternalContext()
.getRealPath("/");
}
public String navigate(String activeLinkStr) {
if (null != activeLinkStr) {
setActiveLink(activeLinkStr);
}

return getActiveLink();
}
public void addFacesMessage(Severity sev, String msg) {
FacesContext.getCurrentInstance().addMessage(null,
new FacesMessage(sev, msg, ""));
}
public String getUserNameParam() {
if (FacesContext.getCurrentInstance().getExternalContext()
.getSessionMap().containsKey("USER_NAME_PARAM")) {
this.userNameParam = (String)
FacesContext.getCurrentInstance()
.getExternalContext().getSessionMap()
.get("USER_NAME_PARAM");
}
return userNameParam;
}
public boolean isLoggedInUser() {
ExternalContext extCtxt = FacesContext.getCurrentInstance()
.getExternalContext();
String remoteUser = extCtxt.getRemoteUser();
if (remoteUser != null) {
return true;
}
else return false;
}
/**
* @param userNameParam the userNameParam to set
*/
public void setUserNameParam(String userNameParam) {
this.userNameParam = userNameParam;
}
}

LoginUIController.java
This java class with authenticate user through spring security using the entered username and
password combination.
package ui;
import javax.faces.context.FacesContext;
import org.springframework.beans.factory.annotation.Autowired;
import org.springframework.stereotype.Controller;
import security.AuthenticationService;
@Controller
public class LoginUIController extends BaseUIController {
private static final long serialVersionUID = 1L;
private String userName;
private String password;
private String message;

@Autowired
private AuthenticationService authenticationService;
public String login() {
boolean success = authenticationService.login(userName, password);
if (success) {
StringBuilder userNameBuilder = new StringBuilder();
userNameBuilder.append(userName);
FacesContext.getCurrentInstance().getExternalContext()
.getSessionMap()
.put("USER_NAME_PARAM",
userNameBuilder.toString());
return "index";
} else {
this.message = "Wrong Username or Password Entered. Please
LOGIN again.";
return "login";
}
}
public String logout() {
authenticationService.logout();
FacesContext.getCurrentInstance().getExternalContext().getSessionMap()
.clear();
this.userName = null;
this.password = null;
this.message = null;
FacesContext.getCurrentInstance().getExternalContext()
.invalidateSession();
}

return "login";

public String getUserName() {

return userName;
}
public void setUserName(String userName) {
this.userName = userName;
}
public String getPassword() {
return password;
}
public void setPassword(String password) {
this.password = password;
}
public String getMessage() {
return message;
}
public void setMessage(String message) {
this.message = message;
}

public AuthenticationService getAuthenticationService() {

return authenticationService;
}

public void setAuthenticationService(

AuthenticationService authenticationService) {
this.authenticationService = authenticationService;
}

DbConnectionController.java
It is always advisable to create a seperate controller class for storing database connection details. In
entire project, only this file should have hard coded database connection details so that in case of
changing the connection details, only one file needs to be modified.
package database;
import java.sql.Connection;
import java.sql.DriverManager;
import java.sql.Statement;
public class DbConnectionController {
Connection conn;
Statement stmt;
DriverManager driverManager;
public DbConnectionController() {
try {
Class.forName("com.mysql.jdbc.Driver").newInstance();
conn = DriverManager.getConnection(
"jdbc:mysql://localhost:3306/DB_NAME", "DB_USER",
"DB_PWD");
stmt = conn.createStatement();
} catch (Exception e) {
// TODO Auto-generated catch block
e.printStackTrace();
}
}
public Connection getConn() {
return conn;
}
public void setConn(Connection conn) {
this.conn = conn;
}
public Statement getStmt() {
return stmt;
}
public void setStmt(Statement stmt) {
this.stmt = stmt;
}
public DriverManager getDriverManager() {
return driverManager;

}
public void setDriverManager(DriverManager driverManager) {
this.driverManager = driverManager;
}
}

AuthenticationService (Interface declaration)

package security;
public interface AuthenticationService {
public boolean login(String username, String password);
public void logout();
}

AuthenticationServiceImpl (Interface implementation)

package security;
import javax.annotation.Resource;
import org.springframework.security.authentication.AuthenticationManager;
import
org.springframework.security.authentication.UsernamePasswordAuthenticationToken;
import org.springframework.security.core.Authentication;
import org.springframework.security.core.AuthenticationException;
import org.springframework.security.core.context.SecurityContextHolder;
import org.springframework.stereotype.Service;
@Service("authenticationService")
public class AuthenticationServiceImpl implements AuthenticationService {
@Resource(name = "authenticationManager")
private AuthenticationManager authenticationManager;
@Override
public boolean login(String username, String password) {
try {
Authentication authenticate = authenticationManager
.authenticate(new
UsernamePasswordAuthenticationToken(
username, password));
if (authenticate.isAuthenticated()) {
SecurityContextHolder.getContext().setAuthentication(
authenticate);
return true;
}
} catch (AuthenticationException e) {
e.printStackTrace();
}
return false;
}

@Override
public void logout() {
SecurityContextHolder.getContext().setAuthentication(null);
}

LoginUser.java
package security;
import
import
import
import

java.sql.ResultSet;
java.sql.SQLException;
org.springframework.stereotype.Repository;
database.DbConnectionController;

@Repository
public class LoginUser {
DbConnectionController dbConnectionController;
ResultSet resultSet;
public UserEntity getUser(String userName) throws ClassNotFoundException {
UserEntity user = new UserEntity();
dbConnectionController = new DbConnectionController();
String query = "SELECT * FROM LOGIN WHERE USERNAME = '" + userName
+ "'";
try {
resultSet =
dbConnectionController.getStmt().executeQuery(query);
if (resultSet.next()) {
user.setUsername(resultSet.getString(1));
user.setPassword(resultSet.getString(2));
user.setSuperUser(resultSet.getString(3));
user.setFullname(resultSet.getString(4));
user.setDepartment(resultSet.getString(5));
}
dbConnectionController.getConn().close();
dbConnectionController.setConn(null);
dbConnectionController.setStmt(null);
this.dbConnectionController = null;
} catch (SQLException e) {

e.printStackTrace();
return null;

return user;
}
/**
* @return the dbConnectionController
*/
public DbConnectionController getDbConnectionController() {

return dbConnectionController;
}
/**
* @param dbConnectionController
*
the dbConnectionController to set
*/
public void setDbConnectionController(
DbConnectionController dbConnectionController) {
this.dbConnectionController = dbConnectionController;
}
/**
* @return the resultSet
*/
public ResultSet getResultSet() {
return resultSet;
}

/**
* @param resultSet
*
the resultSet to set
*/
public void setResultSet(ResultSet resultSet) {
this.resultSet = resultSet;
}

UserEntity.java
package security;
public class UserEntity {
private String username;
private String password;
private String superUser;
private String fullname;
private String Department;
public String getUsername() {
return username;
}
public void setUsername(String username) {
this.username = username;
}
public String getPassword() {
return password;
}
public void setPassword(String password) {
this.password = password;
}

public String getSuperUser() {

return superUser;
}
public void setSuperUser(String superUser) {
this.superUser = superUser;
}
public String getFullname() {
return fullname;
}
public void setFullname(String fullname) {
this.fullname = fullname;
}
public String getDepartment() {
return Department;
}

public void setDepartment(String department) {

Department = department;
}

UserDetailsManager.java
package security;
import
import
import
import
import
import
import

org.springframework.security.core.userdetails.User;
org.springframework.security.core.userdetails.UsernameNotFoundException;
org.springframework.stereotype.Service;
org.springframework.security.core.userdetails.UserDetails;
org.springframework.security.core.userdetails.UserDetailsService;
org.springframework.transaction.annotation.Transactional;
org.springframework.security.core.authority.AuthorityUtils;

@Service
public class UserDetailsManager implements UserDetailsService {
@Override
@Transactional
public UserDetails loadUserByUsername(final String userName)
throws UsernameNotFoundException {
boolean
boolean
boolean
boolean

enabled = true;
accountNonExpired = true;
credentialsNonExpired = true;
accountNonLocked = true;

UserEntity userEntity = new UserEntity();

LoginUser loginUser = new LoginUser();
try {

userEntity = loginUser.getUser(userName);
} catch (Exception e) {
e.printStackTrace();
}

return new User(userEntity.getUsername(), userEntity.getPassword(),

enabled, accountNonExpired, credentialsNonExpired,
accountNonLocked, AuthorityUtils.NO_AUTHORITIES);

UserDetailsManager and AuthenticationService work together to authenticate

the username/password.

login.xhtml
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
"http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml"
xmlns:h="http://java.sun.com/jsf/html"
xmlns:f="http://java.sun.com/jsf/core"
xmlns:ui="http://java.sun.com/jsf/facelets"
xmlns:a4j="http://richfaces.org/a4j"
xmlns:rich="http://richfaces.org/rich">
<h:body>
<h:form>
<div align="center">
<fieldset style="width: 300px;">
<br />
<h:outputText value="Username: " />
<h:inputText id="username"
value="#{loginUIController.userName}" />
<br /> <br />
<h:outputText value="Password: " />
<h:inputSecret id="password"
value="#{loginUIController.password}" />
<br /> <br />
<h:commandButton value="Submit"
action="#{loginUIController.login()}" />
<br /> <br />
<h:outputText value="#{loginUIController.message}"
style="color:red" />
</fieldset>
</div>
</h:form>
</h:body>
</html>

index.xhtml

<html xmlns="http://www.w3.org/1999/xhtml"
xmlns:h="http://java.sun.com/jsf/html"
xmlns:f="http://java.sun.com/jsf/core"
xmlns:ui="http://java.sun.com/jsf/facelets"
xmlns:a4j="http://richfaces.org/a4j"
xmlns:rich="http://richfaces.org/rich">
<h:body>
<h:form>
<h:outputText>Login Successful</h:outputText>
</h:form>
</h:body>

LOGIN table on database side

CREATE TABLE `LOGIN` (
`USERNAME` varchar(45) COLLATE utf8_unicode_ci NOT NULL,
`PASSWORD` varchar(45) COLLATE utf8_unicode_ci NOT NULL,
`SUPERUSER` varchar(10) COLLATE utf8_unicode_ci DEFAULT NULL,
`FULLNAME` varchar(90) COLLATE utf8_unicode_ci DEFAULT NULL,
`DEPARTMENT` varchar(45) COLLATE utf8_unicode_ci DEFAULT NULL,
PRIMARY KEY (`USERNAME`)
) ENGINE=InnoDB DEFAULT CHARSET=utf8 COLLATE=utf8_unicode_ci