Authentication Phase Listener - JSF

Use Case: trying to secure every page (except for the login page). The user must be logged in. I am using application level authentication and not container managed.

Basically, the blogs I found mostly worked, but I would get a blank screen if there was an authentication failure. It ends up that you need to ensure that the navigation case in the faces-config.xml file has the

tag listed. Otherwise, you are always one page behind.

Here's the faces-config.xml entry:

<navigation-rule>        
        <navigation-case>
            <from-outcome>authFailure</from-outcome>
            <to-view-id>/index.jsp</to-view-id>
            <redirect/>
        </navigation-case>
</navigation-rule>

Then in your phase listener, if authentication fails, do this:

context.responseComplete();
context.getApplication().getNavigationHandler().handleNavigation(context, null, "authFailure");

The "authFailure" is the from-outcome in the faces-config.xml file

That's it...