jsf 2.2 deep dive kito d. mann principal consultant

JSF 2.2 Deep Dive

Kito D. MannPrincipal Consultant

Kito D. Mann@kito99

Principal Consultant at Virtuahttp://www.virtua.comTraining, consulting, architecture, mentoring, Official US PrimeFaces partner

Author, JavaServer Faces in ActionFounder, JSF Central

Kito D. Mann@kito99

Co-host, Enterprise Java Newscasthttp://enterprisejavanews.com

Internationally recognized speakerJavaOne, JavaZone, Devoxx, NFJS, TSSJS, etc.

JCP MemberJSF, CDI, JSF Portlet Bridge, Portlets

What is JavaServer Faces?

Server-side UI component frameworkPowerful MVC controllerServer-side templating (Facelets)

What is JavaServer Faces?

JSF 2.2 is part of Java EE 7Also runs on Java EE 6 containers

Servlet 3.0 requiredGraceful degradation for Java EE 7-specific features

Example: JSR-353 JSON parsing

Components are the Key

Components render HTML, CSS, and JavaScriptEasy integration with server-side model

DEMO: COMPONENT SUITES + SPECIAL ANNOUNCEMENT

www.liferayfaces.org/web/guest/showcase

Key New Features

HTML5 Friendly Markup SupportPass through attributes and elements

Faces FlowsCross Site Request Forgery ProtectionLoading Facelets via ResourceHandlerFile Upload ComponentResource Library Contracts (Multi-templating)

HTML5 Friendly Markup

Makes it easy to support new browser features without writing a new componentUse pure HTML and special attributes to indicate JSF components

<!DOCTYPE html><html xmlns="http://www.w3.org/1999/xhtml" xmlns:jsf="http://java.sun.com/jsf" xmlns:f="http://java.sun.com/jsf/core" xmlns:ui="http://java.sun.com/jsf/facelets"> <head jsf:id="head"> <title>Putting it all together</title> <script jsf:target="body" jsf:name="js.js"/> <link jsf:name="css.css" rel="stylesheet" type="text/css" /> </head> <body jsf:id="body"> <form jsf:id="form" jsf:prependId="false"> <label jsf:for="name">Name</label> <input jsf:id="name" type="text" jsf:value="#{complex.name}"> <f:ajax execute="@this" render="progress"/> </input>

<label jsf:for="email">Email</label> <input jsf:id="email" type="email" jsf:value="#{complex.email}"> <f:ajax execute="@this" render="progress"/> </input>

<label for="progress">Progress</label> <progress jsf:id="progress" max="3" value="#{complex.progress}" /> </form> </body></html>

Pass through attributes and elements

Passed through to the browser without interference from JSFRendered on the top-most element for the component

HTML5 is the default

HTML5 doctype rendered as defaultTo turn it off in faces-config.xml:

<faces-config-extension> <facelets-processing> <file-extension>.xhtml</file-extension> <process-as>xhtml</process-as> </facelets-processing></faces-config-extension>

Pass through attributes

...<h:selectOneMenu id="menu1" pt:autofocus=true" > <f:selectItem id="menu1Item1" itemLabel="foo” itemValue="true" /> <f:selectItem id="menu1Item2" itemLabel="bar” itemValue="false" /> <f:passThroughAttribute name="data-info" value=”#{myBean.info}”/> <f:passThroughAttributes value="#{myBean.attributeMap}" /></h:selectOneMenu>...

Pass through elements

...<input type="password" jsf:id="passwordInput" pattern=".{5,}"

size="20" maxlength="20" jsf:label="Password"title="This field must be at least 5 characters long."required="required" jsf:required="true"jsf:value="#{loginController.password}">

<f:validateLength minimum="5" maximum="20" /></input>...

DEMO: HTML5-FRIENDLY MARKUP

Stateless Views

Views can now be marked as stateless

Does not work with view scoped beans

<f:view transient="true”/>

Faces Flows

Allows you to group sets of views together into logical navigation pathsBuilt with ideas from existing solutions

ADF Task FlowsSpring Web FlowApache MyFaces CODI

Faces Flows

Think of a flow like a Java methodCan be “called” from any place in the applicationCan accept input parameters and return values

Faces Flows

Well defined interface contractInternal implementation details hidden

New facesFlowScope for flow local storageNew @FlowScoped CDI annotation: automatic activation/passivation

Faces Flows

Navigation can now move between nodesNodes have types:

ViewMethod CallSwitchFlow CallFlow Return

Faces Flows

Enables packaged, reusable application fragmentsDepends on new “client window” featureRequires CDI

Packaging Faces Flows

my-flow.jarMETA-INF/beans.xmlMETA-INF/flows/{flowName}/{flowName}-flow.xmlMETA-INF/flows/{flowName}/{viewNode}.xhtml{javaPackagePath}/{javaClassName}.class

DEMO: FACES FLOWS

Java Faces Flow Definition

@ApplicationScopedpublic class FlowA implements Serializable { @Produces @FlowDefinition public Flow buildMyFlow(@FlowBuilderParameter FlowBuilder flowBuilder) { String flowId = "flow-a"; flowBuilder.id("", flowId); flowBuilder.viewNode(flowId, "/" + flowId + "/" + flowId + ".xhtml").markAsStartNode(); flowBuilder.returnNode("taskFlowReturn1"). fromOutcome("#{flow_a_Bean.returnValue}");

flowBuilder.inboundParameter("param1FromFlowB", "#{flowScope.param1Value}");

flowBuilder.inboundParameter("param2FromFlowB", "#{flowScope.param2Value}");

Java Faces Flow Definition

flowBuilder.flowCallNode("callB").flowReference("", "flow-b"). outboundParameter("param1FromFlowA", "param1Value"). outboundParameter("param2FromFlowA", "param2Value"); return flowBuilder.getFlow(); }}

XML Faces Flow Definition

<faces-config version="2.2" ...>

<flow-definition id="flow-b"> <flow-return id="taskFlowReturn1"> <from-outcome>#{flow_b_Bean.returnValue}</from-outcome> </flow-return>

<inbound-parameter> <name>param1FromFlowA</name> <value>#{flowScope.param1Value}</value> </inbound-parameter> <inbound-parameter> <name>param2FromFlowA</name> <value>#{flowScope.param2Value}</value> </inbound-parameter>

XML Faces Flow Definition

<flow-call id="callA"> <flow-reference> <flow-id>flow-a</flow-id> </flow-reference> <outbound-parameter> <name>param1FromFlowB</name> <value>param1Value</value> </outbound-parameter> <outbound-parameter> <name>param2FromFlowB</name> <value>param2Value</value> </outbound-parameter> </flow-call> </flow-definition>

</faces-config>

Cross-site request forgery, also known as a one-click attack or session riding and abbreviated as CSRF (sometimes pronounced “sea-surf”) or XSRF, is a type of malicious exploit of a website whereby unauthorized commands are transmitted from a user that the website trusts.

Source: http://en.wikipedia.org/wiki/Cross-site_request_forgery

Cross-site Request Forgery Protection

JSF has always handled this via POST requests

The ViewState is required for a request to be accepted

JSF 2.2 encrypts the ViewState by default

Cross-site Request Forgery Protection

GET requests handled with new <protected-view> element in navigation rulesJSF ensures that protected views come from the same web application

Loading Facelets via ResourceHandler

In JSF 2.0/2.1:ResourceHandler used for JavaScript, CSS, images etc.ResourceResolver used for Facelets

JSF 2.2:Everything (including Facelets) loaded via ResourceHandler

File Upload Component

File upload supported in Servlet 3.0Third-party component suite have had file upload for a whileNow supported as a component in JSF 2.2Ajax and non-Ajax use cases will be supported

File Upload Component

<h:inputFile id="file” value="#{fileUploadBean.uploadedFile}"> <f:validator validatorId="FileValidator" /></h:inputFile>

Resource Library Contracts (Multi-templating)

Allows you to template site elementsHeader, sidebar, content area, footer, banner, CSS, images, etc.

Packaged as JAR filesDefines contracts

Resource Library Contracts (Multi-templating)

Allows you to change global layoutUseful for apps with per-client customization

Resource Library Contracts: JAR Contents

META-INF/contracts/siteLayout/

javax.faces.contract.xmltopNav_template.xhtmlleftNav_foo.xhtmlstyles.cssscript.jsbackground.png

subSiteLayout/javax.faces.contract.xmlsub_template.xhtml

Applying Resource Library Contracts

Global (default)

Via paths in faces-config.xml:

<contract-mapping> <url-pattern>/user/*</url-pattern> <contracts>user</contracts> </contract-mapping> <contract-mapping> <url-pattern>*</url-pattern> <contracts>default</contracts> </contract-mapping>

</resource-library-contracts></application>

Per view (must be specified on outer-most file)

<f:view contracts="#{clientManager.clientLayout}"/>

<f:view contracts="tablet,red"/>

DEMO: RESOURCE LIBRARY CONTRACTS

Medium-sized Features

Components/RenderersComponent Managed EL ContextClientWindow

FaceletsHTML5 DOCTYPE is the defaultProgrammatic Composite Component creationFaceletFactory APILifecycle

View ActionsAlmost all artifacts injectable with Java EE resources or CDI

PhaseListeners, factories, listeners, etc.

CDI @ViewScoped Full list:

http://bit.ly/JCP_20120911_MEDIUM

View Actions

Method called before a page is loadedSimilar to preRenderView event, but has other features:

Returns an outcome for navigationCan be executed at different

phases of the lifecycle

DEMO: VIEW ACTIONS

Bug Fixes and Tweaks

UIData now works with Collections instead of just ListsComposite and non-composite components can now be in the same taglib

Bug Fixes and Tweaks

New events for Flash ScopePostKeepFlashValueEventPostPutFlashValueEventPreClearFlashEventPreRemoveFlashEvent

Full list:http://bit.ly/JCP_20120911_BUG_FIXES

Bug fixes and tweaks: URI Changes

Library Old URI New URI

Composite Components

http://java.sun.com/jsf/composite

http://xmlns.jcp.org/jsf/composite

Faces Core http://java.sun.com/jsf/core http://xmlns.jcp.org/jsf/core

HTML_BASIC http://java.sun.com/jsf/html http://xmlns.jcp.org/jsf/html

JSTL Core http://java.sun.com/jsp/jstl/core http://xmlns.jcp.org/jsp/jstl/core

JSTL Functions http://java.sun.com/jsp/jstl/functions

http://xmlns.jcp.org/jsp/jstl/functions

Facelets Templating

http://java.sun.com/jsf/facelets http://xmlns.jcp.org/jsf/facelets

Pass Through Attributes

http://java.sun.com/jsf/passthrough

http://xmlns.jcp.org/jsf/passthrough

Pass Through Elements

http://java.sun.com/jsf http://xmlns.jcp.org/jsf

JSF 2.3 has Officially Begun

Part of Java EE 8Will depend on Java SE 8No backward compatibility

Managed beans will be deprecated@Inject FacesContext

JSF 2.3 has Officially Begun

Multi-field validationAjax method invocationEL optimizationBetter integration with client-side technologies and frameworks

Summary

JSF 2.2 is part of Java EE 7 (released in Spring, 2013)Backwards compatible with Java EE 6

Summary

Key new featuresHTML5 Friendly Markup SupportFaces FlowsCross Site Request Forgery ProtectionLoading Facelets via ResourceHandlerFile Upload ComponentResource Library Contracts (Multi-templating)

Summary

Medium-sized features:View ActionsBetter support for CDI and resource injectionClient windowFacelets tweaks

Summary

Many other bug fixes and tweaksJSF 2.3 has just begun!

jsf 2.2 deep dive kito d. mann principal consultant

Documents

hypermedial jsf tools tutorial - build a jsf 2.0 application

jsf 2: introduction and overview - custom training...

analyst report kito corporation

flame-transmission-proof kito devices for storing and...

kito® protection examples kito® protection examples

jsf meets js (2. ed.) - jsf-komponenten mit javascript

end carriage, geared motor, peripheral equipment kito...

new champion kito

javaserver faces, jsf - kth2 jsf, content • jsf...

160905 kito catalog nk en web - kito corporation · title:...

kito es3 operation

kito electric chain hoist - spb kran … kito electric chain...

javaserver faces (jsf)...

jsf and ajax - · pdf file• have to be an ajax/client...

hoists kito cb

kito corporation annual report 2018

case kito fix

duncan mills -...

kito er2 owners manual

getting started with jsf adapted from kito d. mann's