This is not possible with HTTP, therefore also not with JSF. However, there are several ways to achieve this requirement.
Place it in the session area. In the bean behind the redirected page, read and remove it from the session area. Or, when you are using JSF 2.0, use the flash area.
Go to the page containing the POST form pointing to the desired URL, having the token as a hidden input value and including some JS code that form.submit() does when the page loads.
Balusc
source share