JavaServer Faces 2.0, The Complete Reference

CHAPTER 14Securing JavaServer Faces Applications

This chapter explains how to secure your JavaServer Faces application. At the outset, it is important to state that computer security in general, and Web security in particular, are very large topics. In this chapter, we examine the issue only as it relates to JSF. We begin with an introduction to some high-level security concepts, followed by a review of the fundamentals of the security features provided by the Java EE Platform Web tier. Fortunately, everything you already know about Java EE Platform Security applies to JSF applications as well. The chapter will close by presenting a simple JSF-based framework for securing a JSF Web application, using the Virtual Trainer as an example. Throughout, ...