Practical JSF in Java EE 8: Web Applications ​in Java for the Enterprise

© Michael Müller 2018

Michael MüllerPractical JSF in Java EE 8 https://doi.org/10.1007/978-1-4842-3030-5_32

32. Authentication and Authorization

Michael Müller¹ 

(1)

Brühl, Nordrhein-Westfalen, Germany

 

Sometimes it’s crucial to protect an application or data against unauthorized access. Although Alumni offers some public pages, most are restricted to members. The system will grant access to certain features for well-known users only. Luckily, the application server provides some security features, like authentication and authorization, and controls access to parts of the program with the concept of user roles.

Container-provided security isn’t specific to JSF. It’s part of the HTTP handling and can be used by a simple servlet too. Before integrating ...