Authentication / Authorization in JSF web application?

Question

I found there are 2 types of authentication mechanism in JSF.

1. JAAS (Java Authentication and Authorization Service)
2. Container managed

(please correct if I am wrong)

I tried searching for a better tutorial that guide to learn any of those method. Unfortunately I was ended up in many of uncompleted lessons. Can any one provide me a solid tutorial or any guide where I can catch the rope.

Answer 1

There are not just 2 types of authentication mechanisms (regardless of JSF). The Oracle (SUN) documentation is actually very good and I would recommend it:

Tutorial

It discusses how to address security requirements in web tier and enterprise tier applications. Namely:

1. Getting Started Securing Web Applications - discusses and provides examples for adding security to web components such as servlets.
2. Getting Started Securing Enterprise Applications - discusses adding security to Java EE components such as enterprise beans and application clients.