The $JONAS_ROOT/examples/alarm/web/secured/ directory contains JSP samples for the Alarm application.
JavaServer Pages (JSP) was Sun's reponse to Microsoft ASP. It looks like a scripting language that basically combines standard HTML and scripting tags. On its first invocation, a JSP is tranlated into a Java servlet. There are many books on this topic if you want to learn more about it.