Is JSF a good candidate for Login pages?

Hi all,
In a JSF-based web app, should the login page be JSF-based at all? It seems any JSF page assumes we have a live session, with the component tree and all that stuff. But before a user is logged in, there may not be a session. If a JSF login paged is used, I encounter problems with my session timing out, causing the page to simply refresh itself when you login. Then the user has to login a 2nd time to be successful.
Should I use a simple JSP page? Is there any way a JSF-based login page will work?
Thanks,
Eric.

Eric, JSF works just fine building a login page. If you have webserver sessions enabled, as soon as an user requests a page a session is created, so there will be a session active for the first view of the login page.
Sessions timing out have little to do with JSF per se; is the user waiting for longer than your timeput period before clicking OK on the login page? Are you mixing JSP/JSTL/JSF in non-allowed ways?
As an aside, consider saving an authentication token client-side so you can restart sessions (with checks for IP, etc), and using a servlet filter to check for logged-in ness
Regards,
--A                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                               

Similar Messages

  • How to enable https or SSL for login page only?

    Hi,
    My application is runnnin in iPlanet web server 4.1 version.
    how to make my login page only secured (SSL)?
    previously we have done https enable for the whole application. but client specifically wants for login page only, not for the whole application. how can i make SSL for login page only in iPlanet 4.1.
    I searched through iPlanet console, but i didn't get any option such.
    i found one more thing console,i.e., "encrypt on or off". if i put encrypt "on" means, it will be for the whole application? How can i make it for login page only.
    Do i need to do any code changes for that?
    i tried through web.xml security constraints tags, but it is not working and taking that file as we are doing everything in servlet.properties and rules.properties files.
    can anybody help me in this regard?
    Regards,
    Chandu

    You specify SSL in web.xml of your application. So, in that case other web applications in same server would not be affected.
    <security-constraint>
    <web-resource-collection>
    <web-resource-name>myresources</web-resource-name>
    <url-pattern>/*</url-pattern>
    </web-resource-collection>
    <user-data-constraint>
    <transport-guarantee>CONFIDENTIAL</transport-guarantee>
    </user-data-constraint>
    </security-constraint>Following link will help you to setup SSL in tomcat:
    [http://techtracer.com/2007/09/12/setting-up-ssl-on-tomcat-in-3-easy-steps/|http://techtracer.com/2007/09/12/setting-up-ssl-on-tomcat-in-3-easy-steps/]
    Thanks,
    Mrityunjoy

  • To avoid displaying "Page has expired" dialog for Login page

    Hi,
    In my application, if the session get timed out, its displaying "page has expired" dialog for login page also. I dont want to display "Page has Expired" dialog for Login page. I am using Jdev11.1.2.1. Please help....

    This will help.
    How to disable "Page Expired " dialog

  • Finding out objects good candidates for reorganization ( datafile shrink)

    Hi Gurus,
    I need to find out what can objects are good candidates for reorganization to allow shrinking some datafiles. one of the challenges i have is to try and figure out how i can release some space from the tablespace in one of our environment .Please let me know if you have any scripts for this.

    Either on a tablespace by tablespace basis or as a general statement which of the following statements are more true than the other statements.
    1) More data is being INSERTED into the DB than being DELETED. In other words total disk space consumption is increasing?
    2) About the same amount of data in being INSERTED as being DELETED. In other words the amount of disk space consumed is at equilibrium.
    3) More data is being DELETED than being INSERTED. In other words less data is being held in the DB as time progresses.
    Which statement best reflects your database environment?

  • Session timeouts for login page with in a html frame

    Hi, i have a login page which when the session times out gets redisplayed within the frame of the html page where the session timed out , i have tried setting the session timeouts to be less than the other application so that the login page will timeout before the documentum application but this does not make a difference.
    does any one know how i could get the login page to redisplay by itself, outside of the html frame. do i need to have some javascript to figure out if there is a frame then redraw the page etc...and how should i di this ? any working examples will be appreciated.

    You would certainly need some Javascript or use the meta-refresh tag to the session timeout time. If you set the meta-refresh tag in a frame to a time just a little bit bigger than the session timeout time and the set your security mechanisms to force the user to login in again when the session times out, the frame will refresh after the session has timed out and the application should forward the frame to the login page.
    <meta http-equiv="refresh" content="session-timeout-timeout+1">
    (timeout time is in seconds)

  • Is this project a good candidate for BizTalk?

    Hi all
    We have a project as outlined below, I’d like your input to understand if BizTalk is a suitable candidate assuming cost is not an issue and we'll have other uses for BizTalk.
    - 300+ retail sites
    - Sales transaction information stored in a DBF file
    - DBF file updated with latest sales information by placing a marker file which initiates an external program to update the file
    - DBF file will grow from 0MB (no records) to up to 3.5MB (9000 records)
    - Once the DBF is updated it can be picked up in some way by BizTalk
    - Assume I just want to store the raw data in a SQL table but need to ensure BizTalk will only add new records
    Without getting into what exactly i expect BizTalk to do with the file does the process of collecting files from multiple remote sites\processing 3.5MB\9000 records sound like a typical use case?
    My main worry is picking up files from 300+ remote sites and hearing that these files may grow 10x as they are converted to XML - don’t know if this is something to look into or nothing to worry about.
    Thanks in advance for reading.

    Its typical use case but for SQL-SSIS. SSIS data source connection manager has connection properties to Dbase files( dBASE 5.0) access the Dbase file and send to SQL Server
    table.
    For this type of ETL process which could involve high message volumes (may in future) I would consider using SQL SSIS not BizTalk. With SSIS you can access files from remote
    server, extract it upload/insert the record from Dbase to SQL table. Why do you need to “BizTalk” or “message box” or “publish-subscription” for this ETL process? I would consider SQL-SSIS for this requirement.
    Have this to get some idea:
    Importing DBF files to SQLServer Table using SSIS
    http://timothychenallen.blogspot.co.uk/2007/07/how-to-import-dbase-tables-into-sql.html
    http://webcache.googleusercontent.com/search?q=cache:SklMA9_RcscJ:simonsuthers.wordpress.com/2013/05/20/importing-dbf-files-to-sql-server-using-ssis/+&cd=8&hl=en&ct=clnk&gl=uk
    If this answers your question please mark it accordingly. If this post is helpful, please vote as helpful by clicking the upward arrow mark next to my reply.

  • Jsf a good framework for production?

    Trying to decide on jsf as a framework. Could someone help me with some answers to the followign questions:
    1.How is JSF performance in production?
    2. Is there a way to avoid Repost Dialog on refresh/back button?
    3. Any issues with SSL (back button on SSL)
    4. Does 2+ Windows with same session interfering with each other�s state ?
    5. Any real World Examples? Ang big production sites using jsf(any with high volume hits?
    6. Is there any Annotation support to help with the xml config generation,etc?

    Trying to decide on jsf as a framework. Could someone help me with some answers to the followign questions:
    1.How is JSF performance in production?
    2. Is there a way to avoid Repost Dialog on refresh/back button?
    3. Any issues with SSL (back button on SSL)
    4. Does 2+ Windows with same session interfering with each other�s state ?
    5. Any real World Examples? Ang big production sites using jsf(any with high volume hits?
    6. Is there any Annotation support to help with the xml config generation,etc?

  • Am I a good candidate for the iPhone?

    In April, I will be out of contract with Sprint. I currently have a Palm Centro and I use the **** out of certain features. The only thing I'm not loving about the iPhone is the lack of hard keyboard, but I've played with the iPhone enough to know that it won't be a huge problem. The important things to me are:
    *Internet Radio (I use Pocket Tunes Deluxe on my Centro)
    *Calender
    *Alarm Clock (I need at least 3 alarms)
    *Memo
    *A built in phone number/address/reverse lookup app (like TryDA for palm)
    *A weather/traffic/theater showtimes, etc. app
    *Push email from Yahoo, Gmail, Hotmail, etc.
    I know I can do some of these things in Safari, but having a shortcut is great. I've become spoiled to how customized my Centro is for ME, and I'd just like to know I'll be getting the same out of the iPhone. Also, how fast are 3G speeds compared with EDGE speeds? I've become spoiled to how fast EV-DO is on Sprint and ATT's coverage map shows my house in an EDGE location. If it's too slow, I'm just going to hold out until ATT has a bigger 3G footprint.

    Here are the answers to your questions:
    1-There are plenty of internet radio apps in the appstore and they are all free (that I know of, I currently have 5 different ones downloaded)
    2-There is a calendar on the iPhone and you can also sync it with MobileME (Apple's internet program that will sync data between your computer, phone, internet) and Outlook.
    3-I don't know what the max cap on Alarms are, but I've set 6 alarms for a day at one point.
    4-There is a notepad application (plus many more in the appstore)
    5-There are apps available from the appstore that will allow you to search contacts, etc.
    6-There is a default weather app that is included in the iPhone, and there are more available in the appstore. I believe there are also traffic apps as well. There are apps for movie theaters and all the info you'll need.
    7-There is push email from Yahoo, Gmail, AOL, Exchange Server (2003 and higher), and you can put in others, but it depends on whether they will support them or not. I do know that for Hotmail you have to purchase an app from the appstore which is $9.99.
    8-You can create shortcuts for specific webpages that will be on your "desktop" of the iphone.
    9-The 3G speeds are 3 times faster or more than Edge speeds. I switch between using Edge and 3G because of coverage (*You have to make sure that 3G is in your area otherwise you'll only have access to Edge*). You can check to see AT&T's 3G coverage area by clicking the link below, you'll see the View 3G/Mobile Broadband coverage link at the bottom right.
    http://www.wireless.att.com/coverageviewer/
    Also, the iPhone doesn't have MMS, so you have to use the email as a workaround. People can send the pictures, videos, sounds, etc to your email address from their phone, and you can send pictures through email to their phone as an MMS message.

  • Custom Error message in Login Page

    Hi,
    I am using MVC framework for my project. I want to display custom error messages to the user in the Login page(JSP).
    For eg: invalid password, password has been expired etc. How do I pass these messages from Java to my login page & display it?

    This is a sample action class for login page in struts : -
    package xxx;
    import javax.servlet.http.HttpServletRequest;
    import javax.servlet.http.HttpServletResponse;
    import org.apache.struts.action.ActionError;
    import org.apache.struts.action.ActionErrors;
    import org.apache.struts.action.ActionForm;
    import org.apache.struts.action.ActionForward;
    import org.apache.struts.action.ActionMapping;
    import LoginForm.java;
    public class Action extends org.apache.struts.action.Action
    public ActionForward execute(ActionMapping mapping, ActionForm form,
    HttpServletRequest request, HttpServletResponse response)
    throws Exception {
    ActionErrors errors = new ActionErrors();
    ActionForward forward = new ActionForward(); // return value
    String username;
    String password;
    try {
    LoginForm lf = new LoginForm;
    username =lf.getUserName();
    password = lf.getPassword();
    if( username== null)
    forward=mapping.getInputForward();
    if( (username == "admin" ) && ( password="admin"))
    // do something here
    } catch (Exception e) {
    // Report the error using the appropriate name and ID.
    //Errors will be caught here.
    errors.add("name", new ActionError("id"));
    // If a message is required, save the specified key(s)
    // into the request for use by the <struts:errors> tag.
    if (!errors.isEmpty()) {
    saveErrors(request, errors);
    // Forward control to the appropriate 'failure' URI (change name as desired)
    //     forward = mapping.findForward("failure");
    } else {
    // Forward control to the appropriate 'sucuess' URI (change name as desired)
    forward = mapping.findForward("success");
    // Finish with
    return (forward);
    You need to have LoginForm.java as Model and Login.jsp as View . Action.java will be your controller.

  • Did any body try to change 10g SSO  login page to custom login page?

    Hi..
    Did any body try to change Oracle 10g SSO login page with custom login Page as we used to do in 902 and 1022 versions by changing wwsso_ls_configuration_info_t table entries?
    It seems that there is now other file policy.properties that has entry for login page.
    Is there any documentation provided by Oracle on this?
    I checked metalink and SSO admin guide?
    Any clue or glue....??
    Thanks
    Sarvesh

    Try 1 & 2 if does not work please file a daycare for further assistance.
    1.   In "Day CQ Login Selector Authentication Handler" for path info add an empty row then verify.
    2.   Delete the existing entry for "Day CQ Login Selector Authentication Handler" , Configure your custom at repository level & verify

  • How to make a simple login page using java creator studio and mysql

    Hi,
    I hav got java creator studio n my sql.Can u give me the code for login page authentication and navigation

    This is a forum about Java language questions, not about how to use a developers tool. I would say to go to the site where you got java creator studio from, and look for a forum there.

  • How do you create a login page using dashcode for the iPhone's mobile safari that will transfer you to the next page?

         Hey I have created a login page in Dashcode for a mobile safari app (aka iphone web app) and I am having trouble since I can not find any useful info about multiple pages. I don't want to use a stack layout view because it is only a login page and I need to check with a database to make sure the user's login info is correct. Right now I have it set up so that it loads another iphone web app project once it validates the info.
         The only problem with this is I am having a good bit of trouble trying to pass values from my php code to javascript or html. For some reason calling the javascript inside the php code makes the actual code inside the app not be called and same with the echo statment for the html.
    So I would like to be able to create the app in this way:
    Login page > PHP > MS SQL > PHP > UNKNOWN (if I can't get the javascript or html to output both) > Secure info on the next page
         I believe It would be a lot easier if I had the option for a multiple page but instead I am having to load up an entirely new dashcode project. If anyone knows a better way please let me know. Or if anyone knows a link to good information on passing values from php to javascript, because I couldn't get any of the code I tried to work, I would really appreciate it.

    Addendum to previous reply:
    OK.  This is weird--but I should be used to that, and just grateful that it seems to work (for now).
    What I had done is FTPd some image files to my site using Filezilla, but when I had tried to access them, I was unsuccessful.  I am almost sure that I used the same url (and variations of it) as you suggested, namely,  http://mysite.verizon.net/username/filename , and it either did not work, or gave me the "Page under construction", or, in some cases asked me for my username and password.
    But, when I did it this time, it worked.  So I probably had something off, but I can now do what I want.
    By the way, if you'll permit another question, while on the site-builder site, it said that there was a "Web Photo Manager", and said that "To download the Web Photo Manager: Open the Site Builder application and go to the All My Sites page. Click on the Web Photo Manager link (listed under Advanced Building Tools )."  I can't find it--would you happen to know where it is?
    In any case, thanks a lot for all your help--it solved my problem. 

  • WLC 2504 - French characters for guest web login page

    Good day,
    I have recently installed a WLC 2504 and I have the following issue:
    When I modify the text for the web login page (Under security/Web Auth/Web Auth page), if I use french caracters such as (é, è, à, etc...) in the message body, it does not show up correctly on users computers. As we're a bilingual country, I must put a bilingual text message. Are there any settings or workaround out there to rectify this?
    We're on version 7.2.103.0
    Thanks,
    Eric

    Thanks Scott, I'll have a look at the documentation.
    Right after sending this post, I tried typing the actual HTML code for the character instead and it seems to be working. I'm curious about custom webauth page, we may be able to customize it more than we thought we could do.
    Cheers,
    Eric

  • Brand/ Remove Office 365 Login Page for SharePoint Online

    Hi  there,
    HAPPY NEW YEAR!
    Thank you very much for setting up this great forum. I have learned a lot of good tips from here.
    We have a challenge which we would like to find a solution to.
    We are using Project Online with SharePoint Online with Office 365.
    We are trying to find a solution to brand/ (if branding is not possible) get rid of the Office 365 log in page.
    What we are trying to achieve is:
    1. Users click on a link, say:
    https://abc.sharepoint.com/project1/
    2. Instead of seeing Office 365 login page, we would like them to be able to see the login page with our own brand or a login box to enter username and password.
    Thank you very much in advance for the time you set aside to share your knowledge with us.
    Sincerely, we really appreciate your kind help.
    Charlotte Tang
    Charlotte Tang

    Hi Charlotte,
    According to your post, my understanding is that you want to customize the Office 365 login page for SharePoint Online.
    We can implement ADFS for the Office 365 subscription, then customize the ADFS forms based on login page.
    Per my knowledge, If no ADFS you will need to use the Microsoft login page.
    Here are two similar threads for you to take a look at:
    http://community.office365.com/en-us/forums/148/t/194202.aspx
    http://community.spiceworks.com/topic/380634-o365-custom-login-page
    Best Regards
    Dennis Guo
    TechNet Community Support

  • Error on microsoft login page for OpenId authentication using Azure AD

    We have implemented authentication for multi tenant SaaS solution which uses Azure Ad single sign on using OpenIdConnect authentication and its working fine.
    The problem is when user is logged in in azure management portal with his live account and in other tab he try to open our app, then he directly gets below error on Microsoft login page.
    Additional technical information:
    Correlation ID: 78e13474-6f92-40ec-b463-91e36a6dae84
    Timestamp: 2015-04-14 12:27:20Z
    AADSTS50020:
     User account '[email protected]' from external
     identity provider 'live.com' is not supported for application
     'https://xxxxx.onmicrosoft.com/xxxx'. The account needs to
     be added as an external user in the tenant. Please sign out and sign in
     again with an Azure Active Directory user account.
    This works fine if I will pass "prompt=login" query string parameter in sign in request, But in that case single sign on is not working. Is there any way to resolve this issue
    without loosing single sign on experience?

    Hello,
    Have you tried the steps suggested by
    Imtiaz Hussain in the
    previous thread you queried ?
    Is the error the same that you were previously encountering ?
    Regards,
    Neelesh.

Maybe you are looking for