users@javaserverfaces.java.net

How do I use JSF with JAAS or what is the standard security approach for JSF?

From: Todd Patrick <Todd.Patrick_at_dtn.com>
Date: Thu, 24 Apr 2008 10:51:57 -0500

I have been searching for concrete real world examples of using JAAS with JSF and there seems to be a lot of adhoc implementations. Getting JAAS to work with JSF has been a real nightmare and I was wondering if anyone could provide any information on how they approached this or any examples that I may be missing. Today, I have a user log in on a JSP page to utilize the j_security_check in JAAS and then I redirect the user to a page in my JSF based application. I also have to update the faces-config.xml and add the <redirect/> element to each of my navigation-cases in order for the HTTP header to contain the data needed for JAAS. Does this sound right? Thanks, --Todd ----------------------------------------- NOTICE: This email message is for the sole use of the intended recipient(s) and may contain confidential and privileged information. Any unauthorized use, disclosure or distribution is prohibited. If you are not the intended recipient, please contact the sender by reply email and destroy all copies of the original message.