I was trying to understand how to perform PRG on a JSF app using this link https://blogs.oracle.com/enterprisetechtips/entry/post_redirect_get_and_jsf but somehow I got confused on three items.
From the blog, I see from firebug that it is issuing a 302 and GET redirect when rendering pages instead of the POST method which is a PRG. The only changes in the blog is the scope of the bean from being a session scoped to a request scope. SO does this link suggest that all my managed bean be at Request Scope level? I check my sample app that I am doing and I am heavily using ViewScoped and SessionScope beans.
Whats the usefulness of ViewParameters? Arent that a security problem, supposed I add more query string parameters at the url? I am actually finding a use case on where can I used such feature.
If the transaction that I am doing will not do any transactional nature such as ADD/EDIT/DELETE, is it still a good practice to just merely use the JSF navigation which is a POST request? I just wanted to navigate to a new page.
Thanks