Security—there is only one reason to use it and many other reasons to not. In other words, protect your websites against malicious attacks, but get a bigger, slower, and more expensive final product.

In this chapter, you will see a series of four recipes for increasing the security of your JSF applications. You will see how to use the JSF Security project, how to manage JAAS roles and the JSF Security layer, and how to use Acegi/Spring security for writing a login application.