What technologies and libraries are available for JSF security? I want to protect my admin pages of a JSF application from public access.
What technologies and libraries are available for JSF security? I want to protect my
Share
Sign Up to our social questions and Answers Engine to ask questions, answer people’s questions, and connect with other people.
Login to our social questions & Answers Engine to ask questions answer people’s questions & connect with other people.
Lost your password? Please enter your email address. You will receive a link and will create a new password via email.
Please briefly explain why you feel this question should be reported.
Please briefly explain why you feel this answer should be reported.
Please briefly explain why you feel this user should be reported.
It’s a rather difficult question but these days I would go for Spring Security or Apache Shiro. In case you are not using Spring, I would take a look at Shiro. It’s pretty easy to set this up and also to use. There are also few tutorials, like this one from BalusC.
Another option are Realms which can have container specific (Tomcat, Glassfish, …) settings which would make them not portable. You could also use a Phase Listener which can be very neat way to secure small projects (if your application is going to be small, I would go for this option). There are other frameworks and workarounds too, try to google little more about Java EE security and you will see.