JSF form-login-page redirect hits before my filter

Question

I\'m trying to implement a remember-me function in my java ee 6 application, but I have issues combining it with the build-in security feature. I have the following configur

Answer 1

Container managed authentication is indeed invoked before all filters. This is a security restriction.

You've basically 3 options:

• Use programmatic filtering and login instead so that you have more finer grained control.
• Do the job in preRenderView event method of the bean associated with login.jsf instead.
• Grab a framework which supports "Remember me" facility on top of container managed security transparently, such as Apache Shiro or Spring Security.