As per eclipse-ee4j/mojarra#5552 I found out that predefined JNDI variables faces/FlashSecretKey and faces/ClientSideSecretKey are nowhere mentioned in https://jakarta.ee/specifications/faces/4.0/jakarta-faces-4.0.
I wonder if these should be mentioned in the Faces spec at all?
@tandraschko How exactly does MyFaces deal with encrypted Flash state and Client Side state across server restarts without session persistence and/or across distributed systems? The goal is of course that any encrypted Flash state and/or Client Side state needs to be decryptable after server restart and/or on a different server with same session. I scanned for these JNDI variables in MyFaces source code but I couldn't find any.
As per eclipse-ee4j/mojarra#5552 I found out that predefined JNDI variables
faces/FlashSecretKeyandfaces/ClientSideSecretKeyare nowhere mentioned in https://jakarta.ee/specifications/faces/4.0/jakarta-faces-4.0.I wonder if these should be mentioned in the Faces spec at all?
@tandraschko How exactly does MyFaces deal with encrypted Flash state and Client Side state across server restarts without session persistence and/or across distributed systems? The goal is of course that any encrypted Flash state and/or Client Side state needs to be decryptable after server restart and/or on a different server with same session. I scanned for these JNDI variables in MyFaces source code but I couldn't find any.