Book Image

Seam 2.x Web Development

Book Image

Seam 2.x Web Development

Overview of this book

The Seam framework from JBoss allows developers to use JSF, Facelets, EJB, and JPA to write conversational web applications. But you will first have to learn how these standard technologies are integrated using Seam and how they can be built upon using additional Seam components. If you need to build a Java web application fast, but don't have time to learn all these complex features, then this book is for you. The book provides a practical approach to developing Seam applications highlighting good development practices. It provides a complete walk through to develop Web applications using Seam, Facelets, and RichFaces and explains how to deploy them to the JBoss Application Server. You can start using key aspects of the Seam framework immediately because this book builds on them chapter by chapter, finally ending with details of enterprise functionality such as PDF report generation and event frameworks. First, the book introduces you to the fundamentals of Seam applications, describing topics such as Injection, Outjection and Bijection. You will understand the Facelets framework, AJAX, database persistence, and advanced Seam concepts through the many examples in the book. The book takes a practical approach throughout to describing the technologies and tools involved. You will add functionality to Seam applications after you learn how to use the Seam Generator RAD tools and how to customize and fully test application functionality. Hints and tips are provided along the way of how to use Seam and the JBoss Application Server.
Table of Contents (17 chapters)
Seam 2.x Web Development
Credits
About the author
About the reviewers
Preface

Chapter 10. Security

The Seam Framework provides facilities to enable applications to be secured using user authentication and user authorization facilities. In this chapter, we will discuss how security is implemented within a Seam application, highlighting the most common features that are used to secure Seam applications. We'll also highlight some of the more advanced security features that can be used. In particular, we'll pay attention to:

  • User authentication

  • User roles

  • Auditing security events

  • CAPTCHAs

  • The Seam identity manager API

  • Open ID

Note

Much of the functionality described within this chapter was added to Seam in the 2.1 release of the framework.

It is therefore recommended that this should be the minimum version of Seam that is considered when reading this chapter.

User authentication

User authentication is the process of establishing user credentials within an application, and verifying that a user is who they claim to be. Typically, within most desktop and web applications, this is...