Java Persistence with Hibernate

17.4. Validating user input

In the previous example, the login screen and login/logout code, you rely on standard JSF validators and your own code in the doLogin() method to validate user input. When a user submits the login form, JSF runs the declared validators (in login.xhtml) in the Process Validations phase. If the user enters a username and a password, validation is successful, and the login.doLogin() method executes. The given username and password are bound to the database query. User input is validated twice:

• JSF validates the HTML form input before it synchronizes the value of each input field with the bound model, the currentUser in the Seam session context. If you access currentUser later in an action method, you have the guarantee ...