integrate JSF using Primefaces ui & Joinfaces & Spring Boot & Spring security

[Tim Holloway]

Here you go: https://gogs.mousetech.com/mtsinc7/gourmetj-springboot

You can see it running at https://gourmetj.mousetech.com, although it may complain about the security cert (I'm hoping to fix that soon).

It is exactly what you asked for: JSF, Spring Boot, Spring Secury, Spring JPA and more. It has both public pages and secured pages.

You can use the POM as a reference for your own project. You can also build and run a copy of the app on your desktop, although it will need to have a database set up for it, I can help with that if you want that.

[Tim Holloway]

I merged your stuff with the following thread. I hope that is okay by you.

[Hicham Amine]

Hi,
I'm trying to integrate JSF with Spring Boot using Primefaces ui & Joinfaces & Spring Boot and Spring security, so I just added all the dependencies required and the dependency provided by the Joinfaces GitHub repo
https://github.com/joinfaces/joinfaces-maven-jar-example/tree/5.3.x
but I can't use any primefaces components or find the right spring security configuration to allow some public pages like login or register page etc..
can I use the @GetMapping and @Controller to make request etc ...
so please if someone from you guys has already worked with JSF, Joinfaces, Primefaces, and spring security, and can help me I'd appreciate it, I've been stuck on this issue for 4 days.

peace.

here is my pom:

<?xml version="1.0" encoding="UTF-8"?>
<project xmlns="http://maven.apache.org/POM/4.0.0" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
         xsi:schemaLocation="http://maven.apache.org/POM/4.0.0 https://maven.apache.org/xsd/maven-4.0.0.xsd">
    <modelVersion>4.0.0</modelVersion>
    <parent>
        <groupId>org.springframework.boot</groupId>
        <artifactId>spring-boot-starter-parent</artifactId>
        <version>3.2.5</version>
        <relativePath/> <!-- lookup parent from repository -->
    </parent>
    <groupId>com.my.application</groupId>
    <artifactId>my-application</artifactId>
    <version>0.0.1-SNAPSHOT</version>
    <name>my-application</name>
    <description>my-application</description>
    <properties>
        <java.version>17</java.version>
        <joinfaces.version>5.2.5</joinfaces.version>
    </properties>

    <dependencyManagement>
        <dependencies>
            <dependency>
                <groupId>org.joinfaces</groupId>
                <artifactId>joinfaces-bom</artifactId>
                <version>${joinfaces.version}</version>
                <type>pom</type>
                <scope>import</scope>
            </dependency>
        </dependencies>
    </dependencyManagement>

    <dependencies>
        <!--region spring-boot-devtools-->
        <dependency>
            <groupId>org.springframework.boot</groupId>
            <artifactId>spring-boot-devtools</artifactId>
            <scope>runtime</scope>
            <optional>true</optional>
        </dependency>
        <!--endregion-->

        <!--region lombok-->
        <dependency>
            <groupId>org.projectlombok</groupId>
            <artifactId>lombok</artifactId>
            <optional>true</optional>
        </dependency>
        <!--endregion-->

        <!--region spring-boot-starter-web-->
        <dependency>
            <groupId>org.springframework.boot</groupId>
            <artifactId>spring-boot-starter-web</artifactId>
        </dependency>
        <!--endregion-->

        <!--region faces-spring-boot-starter-->
        <dependency>
            <groupId>org.joinfaces</groupId>
            <artifactId>faces-spring-boot-starter</artifactId>
        </dependency>
        <!--endregion-->

        <!--region postgresql-->
        <dependency>
            <groupId>org.postgresql</groupId>
            <artifactId>postgresql</artifactId>
            <scope>runtime</scope>
        </dependency>
        <!--endregion-->

        <!--region spring-boot-starter-data-jpa-->
        <dependency>
            <groupId>org.springframework.boot</groupId>
            <artifactId>spring-boot-starter-data-jpa</artifactId>
        </dependency>
        <!--endregion-->

        <!--region spring-boot-starter-validation-->
        <dependency>
            <groupId>org.springframework.boot</groupId>
            <artifactId>spring-boot-starter-validation</artifactId>
        </dependency>
        <!--endregion-->

        <!--region spring-boot-starter-security-->
        <dependency>
            <groupId>org.springframework.boot</groupId>
            <artifactId>spring-boot-starter-security</artifactId>
        </dependency>

        <dependency>
            <groupId>org.joinfaces</groupId>
            <artifactId>security-spring-boot-starter</artifactId>
        </dependency>
        <!--endregion-->

        <!--region spring-boot-starter-test-->
        <dependency>
            <groupId>org.springframework.boot</groupId>
            <artifactId>spring-boot-starter-test</artifactId>
            <scope>test</scope>
        </dependency>
        <!--endregion-->
    </dependencies>

    <build>
        <plugins>
            <plugin>
                <groupId>org.springframework.boot</groupId>
                <artifactId>spring-boot-maven-plugin</artifactId>
                <configuration>
                    <excludes>
                        <exclude>
                            <groupId>org.projectlombok</groupId>
                            <artifactId>lombok</artifactId>
                        </exclude>
                    </excludes>
                </configuration>
            </plugin>
        </plugins>
    </build>

</project>

Folder structure
resources
-- META-INF
---- resources
-------- assets
-------- pages
---------- auth
------------ login.xhtml
------------ register.xhtml
-------- dashboard.xhtml
-------- master-page.xhtml


my spring config

package my.application.security;

import org.springframework.beans.factory.annotation.Autowired;
import org.springframework.context.annotation.Bean;
import org.springframework.context.annotation.Configuration;
import org.springframework.security.config.Customizer;
import org.springframework.security.config.annotation.web.builders.HttpSecurity;
import org.springframework.security.config.annotation.web.configuration.EnableWebSecurity;
import org.springframework.security.config.annotation.web.configuration.WebSecurityCustomizer;
import org.springframework.security.config.http.SessionCreationPolicy;
import org.springframework.security.web.SecurityFilterChain;

@Configuration
@EnableWebSecurity
public class SpringSecurityConfig {

    private final ApplicationUserDetailsService applicationUserDetailsService;

    @Autowired
    public SpringSecurityConfig(ApplicationUserDetailsService applicationUserDetailsService) {
        this.applicationUserDetailsService = applicationUserDetailsService;
    }


    @Bean
    public WebSecurityCustomizer webSecurityCustomizer() {
        return (web) -> web.ignoring().requestMatchers("/pages/login/register.xhtml","/pages/login/login.xhtml", "/**.html", "/**.xhtml", "/**.jsf", "/webjars/**", "/resources/**", "/javax.faces.resource/**");

    }

    @Bean
    protected SecurityFilterChain configure(HttpSecurity httpSecurity) throws Exception {
        httpSecurity
                .authorizeHttpRequests(request -> request.requestMatchers("/pages/authentication/login.xhtml", "/pages/authentication/register.xhtml").permitAll())
                .authorizeHttpRequests(request -> request.anyRequest().authenticated())
                .cors(Customizer.withDefaults())
                .formLogin(form -> form
                        .loginPage("/pages/authentication/login.xhtml")
                        .failureUrl("/pages/authentication/login?error")
                        .usernameParameter("email")
                        .passwordParameter("password")
                        .defaultSuccessUrl("/dashboard.xhtml")
                        .permitAll())
                .logout(logout -> logout
                        .logoutUrl("/pages/authentication/login?logout=true")
                        .invalidateHttpSession(true)
                        .clearAuthentication(true)
                        .deleteCookies("JSESSIONID")
                        .logoutSuccessUrl("/pages/authentication/login")
                        .permitAll())
                .sessionManagement(session -> session
                        .sessionCreationPolicy(SessionCreationPolicy.ALWAYS)
                        .maximumSessions(1)
                        .maxSessionsPreventsLogin(true))
                .rememberMe(remember -> remember
                        .userDetailsService(applicationUserDetailsService)
                        .rememberMeParameter("REMEMBER_ME")
                        .key("01234567890")
                        .tokenValiditySeconds(7 * 24 * 60 * 60));
        return httpSecurity.build();
    }
}

my RegisterMBean

@Data
@Named
@Component
@RequestScope
@Controller
public class RegisterMBean implements Serializable {

    private final IUserService userService;


    private String firstName;
    private String lastName;
    private String email;
    private String password;

    @Inject
    public RegisterMBean(IUserService userService) {
        this.userService = userService;
    }

    @PostConstruct
    public void init() {
    }

    @GetMapping("/register")
    public String registerPage() {
        return "/resources/pages/authentication/register.xhtml";
    }

    public void register() {
        FacesContext.getCurrentInstance().addMessage(null, new FacesMessage(FacesMessage.SEVERITY_INFO, "Info", "Message Content"));
    }
}

[Hicham Amine]

@Tim Holloway, thanks for sharing this repo, I'll try to check and read the content to start a new project and do the right configuration.