Best way for user authentication on JavaEE 6 using JSF 2.0?

Posted by ngeek on Stack Overflow See other posts from Stack Overflow or by ngeek
Published on 2010-02-05T11:45:35Z Indexed on 2010/05/20 19:10 UTC
Read the original article Hit count: 285

Filed under:

jee6

|

jsf

|

best-practices

|

security

|

web-applications

I'm wondering what the current state of art recommendation is regarding user authentication for a web application making use of JSF 2.0 (and if any components do exist) and JEE6 core mechanisms (login/check permissions/logouts) with user information hold in a JPA entity. The Sun tutorial is a bit sparse on this (only handles servlets).

This is without making use of a whole other framework, like Spring-Security (acegi), or Seam, but trying to stick hopefully with the new Java EE 6 platform (web profile) if possible.

Thanks, Niko

© Stack Overflow or respective owner

Related posts about jee6

JEE6 vs. Spring 3 stack

as seen on Stack Overflow - Search for 'Stack Overflow'
I'm starting a new project now. I have to choose technologies. I need something light, so no EJB or Seam. On the other hand I need JPA(Hibernate or alternative) and JSF with IceFaces. Do you think that such stack on Spring 3 deployed on Tomcat is a good choice? Or a JEE6 web application could be better… >>> More
JEE6 Advice - how viable is it?

as seen on Stack Overflow - Search for 'Stack Overflow'
Hello! A friend and I are trying to start our own UK based business. We both know Java and thought we'd try to implement it using JEE6 and JSP. Can anyone offer some advice on how viable it would be and provide us with resources to consult? >>> More
EJB3 + JEE6: What is a persistent Timer?

as seen on Stack Overflow - Search for 'Stack Overflow'
I'm just about to use the new EJB3 TimerService (as part of Java EE 6), and as usual, I'm impressed by the brevity of JavaDoc :) Do you know what is the effect of the persistent property of the TimerConfig object? JavaDoc TimerConfig says: The persistent property determines whether the corresponding… >>> More
JEE6 Global JNDI Name and Maven Deployment

as seen on Stack Overflow - Search for 'Stack Overflow'
I'm having some problems with the global JNDI names of my EJB resources which is (or at least will) cause my JNDI look ups to fail. The project is being developed on Netbeans and is a standard Maven Web Application. When my application is deployed to GF3.0 the application name is set to something… >>> More
JEE6 Tutorial samples not found

as seen on Stack Overflow - Search for 'Stack Overflow'
in this page of tutorial : http://java.sun.com/javaee/6/docs/tutorial/doc/bnadu.html discuss about hello2 application on samples folder. i download samples from this link and installed correctly: https://glassfish-samples.dev.java.net/servlets/ProjectDocumentList?folderID=5214&expandFolder=5214&folderID=0 but… >>> More

Related posts about jsf

Session Report: What’s New in JSF: A Complete Tour of JSF 2.2

as seen on Oracle Blogs - Search for 'Oracle Blogs'
On Wednesday, Ed Burns, Consulting Staff Member at Oracle, presented a session, CON3870 -- “What’s New in JSF: A Complete Tour of JSF 2.2,” in which he provided an update on recent developments in JavaServer Faces 2.2. He began by emphasizing that, “JavaServer Faces 2.2 continues the evolution of… >>> More
JSF - Unhide jsf component when clicking another component.

as seen on Stack Overflow - Search for 'Stack Overflow'
Hi, I'm trying to have a button that brings up an upload dialog. The way i'm trying to achieve this is similar to this: <h:outputText value="Click Me" id="testit"> <a4j:support reRender="hideme" event="onclick" action="#{actions.switchTestRendered}"/> </h:outputText> <h:outputText… >>> More
???????????! Java EE 6???????????????/???????!!????UFJ????????????????????????Java EE 6??????JavaOne Tokyo 2012?????|WebLogic Channel|??????

as seen on Oracle Blogs - Search for 'Oracle Blogs'
??UFJ?????????????????????????IT??????? ?????????UFJ?????????/????????2007?7????????????JavaEE5?????????Java EE??????????????????????2012?4???????JavaOne Tokyo 2012??????????Java EE 6?????????????????????????Java EE 6???????????????????????????????????????????Java EE 6???????"??????????????"?????… >>> More
JSF 2.0 AJAX: jsf.ajax.request to call method not only rerender an area of page

as seen on Stack Overflow - Search for 'Stack Overflow'
Hi, I'm looking for a soultion of the following problem: _The is a list of links with different types of cars. _The user can click on each car in the list and a ajax request should be sent. _The response of the ajax request should be dependent on the id (of each car) and displayed in an panelGroup… >>> More
JBoss RichFaces vs IceFaces vs Apache Trinidad - JSF component libraries comparison

as seen on Stack Overflow - Search for 'Stack Overflow'
What do you think/use for interface layer? The "backing" layer will be Spring 3. The criteria are : Your privete opinion Components Documentation AJAX Integration Browser support Community Tool support (Eclipse, NetBeans) I found some comparison topics but it was about 2007 and old versions. >>> More