What is the best way to go about implementing authentication and authorization for a JSF web application? Preferrably I\'d still want to use container-based security, as I n
You could use the Servlet 3.0 HttpServletRequest API as shown in this answer to a JSF 2.0 question:
JSF 2.0 Simple login page