Category Archives: Seam

Securing your Seam application cookies

Ok, what's the deal?

Seam is quite a good and secure framework as far as frameworks go. However, with a simple ServletFilter, it can be made just a little bit more secure, and maybe help you pass that next audit. In this post you’ll see how to define a Seam servlet filter to secure your website just a little bit more.
Continue reading

Setting session timeout dynamically with Seam

Curious minds...

In a recent application, the customer wanted to be able to change session timeout dynamically, without restarting the application.
This being a Seam application, I thought it was going to be quite straight-forward: either add it in the timeout= attribute in pages.xml, or just add it wherever we start a new conversation (conversation timeout is effectively what we were looking for anyway).
Continue reading