Re: Tapestry Security

Hi Andreas, tapestry-security (http://www.tynamo.org/tapestry-security+guide/) is a Third Party project, not an Apache Tapestry module. The source code is available on GitHub (https://github.com/tynamo/tapestry-security). Perhaps you can speed things up by cloning the project, making the neces

Re: tapestry-security 0.7.1 and tapestry-resteasy 0.5.0 released!

Thank you. I absolutely depend on tapestry-resteasy, so this is music to my ears. > On 16 Jul 2018, at 5:38 pm, Alejandro Scandroli > wrote: > > 👏 > > > > On Mon, Jul 2, 2018 at 8:26 PM Thiago H. de Paula Figueiredo < > thiag...@gmail.com> wrote: > >> This is wonderful! Thank you very much

Re: tapestry-security 0.7.1 and tapestry-resteasy 0.5.0 released!

👏 On Mon, Jul 2, 2018 at 8:26 PM Thiago H. de Paula Figueiredo < thiag...@gmail.com> wrote: > This is wonderful! Thank you very much! > > On Mon, Jul 2, 2018 at 3:01 PM Kalle Korhonen > wrote: > > > It's that time of the year again. Actually, the community has been asking > > these to be relea

Re: tapestry-security 0.7.1 and tapestry-resteasy 0.5.0 released!

This is wonderful! Thank you very much! On Mon, Jul 2, 2018 at 3:01 PM Kalle Korhonen wrote: > It's that time of the year again. Actually, the community has been asking > these to be released for a while. Thanks to @homburgs, you can now > contribute chains with RegExPatternMatcher to tapestry-s

Re: tapestry-security 0.7.0 released!

Thanks Kalle!! Alejandro. On Fri, Sep 15, 2017 at 3:25 PM, Peter Hvass wrote: > Thank you very much indeed!! > > Kind regards, > Peter Anders Hvass > CTO, James Innes Group > > > On 15 September 2017 at 16:24, Thiago H. de Pau

Re: tapestry-security 0.7.0 released!

Thank you very much indeed!! Kind regards, Peter Anders Hvass CTO, James Innes Group On 15 September 2017 at 16:24, Thiago H. de Paula Figueiredo < thiag...@gmail.com> wrote: > Awesome, Kalle! Thank you very much! > > On Thu,

Re: tapestry-security 0.7.0 released!

Awesome, Kalle! Thank you very much! On Thu, Sep 14, 2017 at 7:58 PM, Kalle Korhonen wrote: > After an extended hiatus, I figured it’s time to do some releases. First up > is the old workhorse, tapestry-security. The 0.7.0 release represents a > true community effort, my job was mainly to merge

Re: tapestry-security 0.7.0 released!

Excellent news, thanks Kalle! On Sep 14, 2017 6:58 PM, "Kalle Korhonen" wrote: After an extended hiatus, I figured it’s time to do some releases. First up is the old workhorse, tapestry-security. The 0.7.0 release represents a true community effort, my job was mainly to merge pull requests from

Re: Tapestry-security/shiro check for 'any' permission

It's been a while but I think you are correct about how Shiro works. I would use a role to solve this. You can make a role like "maintainer" and assign that role to anyone that can maintain objects. Then you can protect any pages after the url /maintain On Wednesday, April 19, 2017, Robin Garner

Re: Tapestry-security CacheManager

Typically, you'd set the desired cachemanager in the realm itself, e.g.: public class UserRealm extends AuthorizingRealm { public UserRealm(...) { super(new MemoryConstrainedCacheManager()); Kalle On Wed, Dec 21, 2016 at 12:47 AM, Charlouze wrote: > Hello tapestry users, > > I wan

Re: tapestry-security oauth authentification

Hi Charles, hope you don't mind that I moved this discussion to the tapestry users list as it may be useful for others as well. Yes, I'm right there with you. The trick to this is to override the SubjectFactory. Shiro creates a subject for all requests, authenticated or not. The principle is roughl

Re: Tapestry-security 0.6.3 and tapestry-model 0.6.0 for T5.4 released!

Thanks for reporting Bob, fixed. Kalle On Tue, Dec 15, 2015 at 3:33 AM, Bob Harner wrote: > Great news, Kalle! > > By the way, when checking it out, I noticed that the "quick start links are > broken at http://www.tynamo.org/tapestry-model+guide/ > On Dec 14, 2015 9:28 PM, "Kalle Korhonen" > w

Re: Tapestry-security 0.6.3 and tapestry-model 0.6.0 for T5.4 released!

That's great news, thanks a lot ! As for tapestry-resteasy and tapestry-security, I had to reorder HttpServletRequestHandler and add some config to the security filter chain to secure my api. It was quite easy to do so I didn't think to tell you. Le mar. 15 déc. 2015 à 12:33, Bob Harner a écrit

Re: Tapestry-security 0.6.3 and tapestry-model 0.6.0 for T5.4 released!

Great news, Kalle! By the way, when checking it out, I noticed that the "quick start links are broken at http://www.tynamo.org/tapestry-model+guide/ On Dec 14, 2015 9:28 PM, "Kalle Korhonen" wrote: > Hey all, > > at this time we have two T5.4 compatible release announcements to make. > First tap

Re: [tapestry-security] PageService return page

OK cool, thx for quick response!! On 12/11/2014 3:03 pm, "Kalle Korhonen" wrote: > On Tue, Nov 11, 2014 at 7:48 PM, Chris Mylonas wrote: > > > Hi Tapestry Users, > > I'm porting some 5.3 (tapestry-security 0.5.1) to 5.4 (tapestry-security > > 0.6.2). > > In my Signin page, there's a declaration

Re: [tapestry-security] PageService return page

On Tue, Nov 11, 2014 at 7:48 PM, Chris Mylonas wrote: > Hi Tapestry Users, > I'm porting some 5.3 (tapestry-security 0.5.1) to 5.4 (tapestry-security > 0.6.2). > In my Signin page, there's a declaration to > import org.tynamo.security.services.PageService ; > which is no longer found/available in

Re: Tapestry-security 0.6.2 released!

Okay great, Thanks Kalle. On Mon, Oct 27, 2014 at 12:02 PM, Kalle Korhonen wrote: > On Mon, Oct 27, 2014 at 8:51 AM, George Christman > > wrote: > > > Sorry Kalle, it's still not entirely clear to me what I should be doing. > > Your saying LoginContextService is internal? Is there another way t

Re: Tapestry-security 0.6.2 released!

On Mon, Oct 27, 2014 at 8:51 AM, George Christman wrote: > Sorry Kalle, it's still not entirely clear to me what I should be doing. > Your saying LoginContextService is internal? Is there another way to access > getXxxURL then? Also, how do we handle redirectedToSavedRequest now? At > You handle

Re: Tapestry-security 0.6.2 released!

Sorry Kalle, it's still not entirely clear to me what I should be doing. Your saying LoginContextService is internal? Is there another way to access getXxxURL then? Also, how do we handle redirectedToSavedRequest now? At some point when you get everything ironed out it might be helpful to present t

Re: Tapestry-security 0.6.2 released!

On Mon, Oct 27, 2014 at 7:30 AM, George Christman wrote: > That's great Kalle. Thanks > > Question, I see you deprecated some methods, but I'm not seeing any > documentation on the new usage. I'm using the following code and I'm seeing > getSuccessPage() and getLoginPage() has been deprecated. I

Re: Tapestry-security 0.6.2 released!

That's great Kalle. Thanks Question, I see you deprecated some methods, but I'm not seeing any documentation on the new usage. I'm using the following code and I'm seeing getSuccessPage() and getLoginPage() has been deprecated. I think I read something about about getLoginPage() being replaced by

Re: Tapestry-security 0.6.2 released!

Toot toot!

Re: Tapestry-security 0.6.1 released!

Nice ! I'll be testing it today :) 2014-10-10 0:27 GMT+02:00 George Christman : > That's great, thanks Kalle > > On Thu, Oct 9, 2014 at 11:20 AM, Dmitry Gusev > wrote: > > > Congrats! :) > > > > On Thu, Oct 9, 2014 at 7:18 PM, Kalle Korhonen < > kalle.o.korho...@gmail.com > > > > > wrote: > > >

Re: Tapestry-security 0.6.1 released!

That's great, thanks Kalle On Thu, Oct 9, 2014 at 11:20 AM, Dmitry Gusev wrote: > Congrats! :) > > On Thu, Oct 9, 2014 at 7:18 PM, Kalle Korhonen > > wrote: > > > Choo choo! The security train is moving again, all aboard! This is the > > 0.6.1 bullet train on the latest T5.4-beta-22 rail. Our r

Re: Tapestry-security 0.6.1 released!

Congrats! :) On Thu, Oct 9, 2014 at 7:18 PM, Kalle Korhonen wrote: > Choo choo! The security train is moving again, all aboard! This is the > 0.6.1 bullet train on the latest T5.4-beta-22 rail. Our rail engineers have > been hard at work and delivered the following enhancements: > >- Session

Re: tapestry-security looking for sample code

On Mon, 04 Aug 2014 23:19:37 -0300, Chris Mylonas wrote: Hi Tim, Hi, guys! Do a Google search for "github eloquentia Thiago tapestry" and you'll find thiago's excellent sample to get you going from a file based thing to database. Thanks for the shoutout, Chris! :D Here's it: https

Re: tapestry-security looking for sample code

Oh yeahhibernate cfg file I put those spaces in cos of parsing problems. Sorry about that - I will note it for the next sucker :P Will fix/note the other. Happy it gave some direction. I've gotta thank Thiago for his sample application, that paved the way for me to get a leg up on things.

Re: tapestry-security looking for sample code

Hi Chris Your blog post has a couple of errors probably caused by copying and pasting out of email. In your pom.xml your repository configuration has tags around the urls Your hibernate.cfg.xml has spaces around the double slashes in the DOCTYPE. "http: // hibernate.sourceforge.net/hibernate-c

Re: tapestry-security looking for sample code

Thanks Chris This is really helpful. Getting an error that I can't parse hibernate.cfg.xml at the moment but I should be able to work it out. Tim On 5 Aug 2014, at 12:27, Chris Mylonas wrote: > And here's some notes from my wiki for a tapestry-security file based auth > and hibernate for ent

Re: tapestry-security looking for sample code

Thanks Tim, we are in the process of moving from Codehaus' SVN to Github so the documentation is dragging a bit behind, sorry for the trouble. I'll update it and fix whatever is broken before the next release. Regardless of the origin of the source code, take a look at the JPA examples. The concep

Re: tapestry-security looking for sample code

Blog entry from previous reply seeing as it is out in the ether now :) Sorry for spamming list http://www.mrvoip.com.au/blog/tapestry-security-howto-notes Chris On Tue, Aug 5, 2014 at 12:27 PM, Chris Mylonas wrote: > And here's some notes from my wiki for a tapestry-security file based auth >

Re: tapestry-security looking for sample code

And here's some notes from my wiki for a tapestry-security file based auth and hibernate for entities. I'm also in +10 timezone down in Sydney - so the replies will come later in the day usually :) Skeleton - Create quickstart tapestry archetype [edit

Re: tapestry-security looking for sample code

Hi Tim, I had sample code in a repo I was making a variations project to split hairs on how to do the same thing using different ways. Unforch that repo was lost by a VPS provider although I have the latest got tree it is def not share-able ATM. Do a Google search for "github eloquentia Thiago t

Re: Tapestry-Security @RequiresPermission("xxx:yyy:zzz") on class

On Sun, 22 Jun 2014 22:56:46 -0300, Chris Mylonas wrote: Ah bugger, it always happens after sending to a list or forum. Found a suitable response to try from Listing 3.25 from Igor's book. e.g. Object onActivate(Long articleId) { this.article = blogService.findArticleById(articleId);

Re: Tapestry-Security @RequiresPermission("xxx:yyy:zzz") on class

On Sun, 22 Jun 2014 22:51:46 -0300, Chris Mylonas wrote: Hi Tapestry Users, Hi! Whilst waiting for customs clearance in a Fijian port, I have a query. Sounds fun! :P In my else, I'd like to redirect to a page, "you don't have permissions for this action". All examples I've come acr

Re: Tapestry-Security @RequiresPermission("xxx:yyy:zzz") on class

Ah bugger, it always happens after sending to a list or forum. Found a suitable response to try from Listing 3.25 from Igor's book. e.g. Object onActivate(Long articleId) { this.article = blogService.findArticleById(articleId); if (this.article == null) { return new StreamPa

Re: Tapestry Security Login?

I am confused it works! On Sat 14 Jun 2014 11:42:38 AM CEST, jeremias.epp...@web.de wrote: > Hello, > > I have a problem with the Tapestry Security Login. The Custom Realm and > the configuration works fine on a desktop app. > But on the web it does not work. If i type in my username and password,

Re: Tapestry Security: transform shiro.ini to Tapestry Security

Yes, asking on this list is fine. It's all Java. You can simply call the setter: setCredentialsMatcher(new HashedCredentialsMatcher(Sha512Hash.ALGORITHM_NAME)); It makes the most sense to me to call it from the constructor of your realm, but you can also call it from outside. Kalle On M

Re: Tapestry-security 0.6.0 relased!

Nice, I like it :). Now I can work on my security issues. On 26.03.2014 18:22, Kalle Korhonen wrote: As hinted earlier, our first T5.4 compatible module, tapestry-security is released. This release is primarily for compatibility, although I threw in one, non-backwards compatible enhancements for

Re: tapestry-security: authentication on rememberme

Hi, thanks Lenny for your suggestion. I already saw this project yesterday. As it does more than i need, i decided me against it. Maybe i will have a look on it when i have more time. Thanks Kalle, overriding the SubjectFactory works perfectly. I will have a look on the RollingToken, it sounds in

Re: tapestry-security: authentication on rememberme

On Tue, Jul 9, 2013 at 10:55 AM, D.R. wrote: > i want to use the rememberme for a failover. I have overridden the > org.apache.shiro.web.mgt.CookieRememberMeManager to build my rememberme > cookies the way i want. As shiro does not support login on rememberme > out of the box, i want to ask where

Re: tapestry-security: authentication on rememberme

The FlowLogix library supports Tapestry-Security login with remember me out of the box: http://code.google.com/p/flowlogix On Jul 9, 2013, at 1:55 PM, D.R. wrote: > Hi @all, > > i want to use the rememberme for a failover. I have overridden the > org.apache.shiro.web.mgt.CookieRememberMeManager

Re: Tapestry Security / page instance / invocation question

On 06/04/2013 11:03 AM, Dmitry Gusev wrote: Just a note that you always can write your own component like this if you want: That's probably the better long term solution for my environment. On Tue, Jun 4, 2013 at 7:50 PM, Richard Frovarp wrote: That would work. The trick is that I need

Re: Tapestry Security / page instance / invocation question

Just a note that you always can write your own component like this if you want: On Tue, Jun 4, 2013 at 7:50 PM, Richard Frovarp wrote: > That would work. The trick is that I need to compute the permissions > dynamically. I'll have to add in more code to handle those types of > wildcard permiss

Re: Tapestry Security / page instance / invocation question

That would work. The trick is that I need to compute the permissions dynamically. I'll have to add in more code to handle those types of wildcard permissions. I was hoping for something much more similar to what I can use with the @RequiresPermissions check. But since I don't have an invocation

Re: Tapestry Security / page instance / invocation question

You don't have invocation here, because you're rendering. And you should know what you're rendering, so you should be able to do this: and in Java: public String getMyPermission() { return "some:permission:" + instance.getId(); } will this work? On Thu, May 30, 2013 at 8:29 PM, Richard Fr

Re: tapestry-security 0.5.1 released

Thanks Tynamo Team!! regards Taha On 29-Apr-2013, at 2:41 PM, Borut Bolčina wrote: > Thanks from our team too! > > > 2013/4/28 Dmitry Gusev > >> Congrats! >> >> And thanks for the great library! >> >> On Sat, Apr 27, 2013 at 10:21 PM, Kalle Korhonen < >> kalle.o.korho...@gmail.com >>> wro

Re: tapestry-security 0.5.1 released

Thanks from our team too! 2013/4/28 Dmitry Gusev > Congrats! > > And thanks for the great library! > > On Sat, Apr 27, 2013 at 10:21 PM, Kalle Korhonen < > kalle.o.korho...@gmail.com > > wrote: > > > Oops, we did it again! We cleaned the security component issue list and > cut > > a new release

Re: tapestry-security 0.5.1 released

Congrats! And thanks for the great library! On Sat, Apr 27, 2013 at 10:21 PM, Kalle Korhonen wrote: > Oops, we did it again! We cleaned the security component issue list and cut > a new release with a few nice little improvements. 0.5.0 was released a few > months before but never announced. 0.

Re: Tapestry security Tynamo vs filter+service

+1 for tapestry-security. This module is excellent and very well documented. The key is, indeed to understanding Shiro, and T-security is just a very lightweight front-end/configuration module for Shiro. On Nov 8, 2012, at 9:45 AM, Richard Frovarp wrote: > On 11/08/2012 07:29 AM, John wrote:

Re: Tapestry security Tynamo vs filter+service

On 11/08/2012 07:29 AM, John wrote: I've been looking at Tynamo tapestry-security and while it is feature rich, it seems complex and not documented or with detailed enough with full examples for me to follow. So I am trying to implement the RequiresLoginFilter code HLS provided. This requies

Re: Tapestry security Tynamo vs filter+service

On Thu, 08 Nov 2012 11:29:57 -0200, John wrote: I've been looking at Tynamo tapestry-security and while it is feature rich, it seems complex and not documented or with detailed enough with full examples for me to follow. I've never used it, but the documentation states quite clearly that i

Re: Tapestry-Security : Filter settings

Tx Alex and Kalle. This is working as expected now -- View this message in context: http://tapestry.1045711.n5.nabble.com/Tapestry-Security-Filter-settings-tp5716466p5716491.html Sent from the Tapestry - User mailing list archive at Nabble.com.

Re: Tapestry-Security : Filter settings

It's a well known gotcha but nothing we can or plan to do about except to improve documentation. Also note that the order in which the rules are contributed is significant. Kalle On Mon, Sep 24, 2012 at 9:11 AM, Alex Kotchnev wrote: > The problem w/ the wildcard statement is that when Shiro tri

Re: Tapestry-Security : Filter settings

The problem w/ the wildcard statement is that when Shiro tries to redirect it to the login page, the login page ends up requiring authentication (because it matches the /* wildcard pattern), etc. In order to make it do what you want, you'll need to allow the login page to be accessed w/o authentica

Re: tapestry-security with caching

On Thu, Aug 2, 2012 at 1:47 PM, Marcin Januszkiewicz wrote: > I'm using the latest versions of tapestry and tapestry-security (5.4.3 > and 0.4.6 respectively) for basic security and session management. > I wanted to explore other capabilities of the shiro framework like > caching and clustering. M

Re: Tapestry Security Federate Facebook Exception

Hi Kalle, The link you provided me doesn't seem to be working. I was able to get it to work using your FederatedAccountServiceExample.class, however I have some additional questions. I'd like to start by explaining my goals. I'd like to use a native login with the option to use a third party lo

Re: Tapestry Security Federate Facebook Exception

Well, you have to debug your federatedaccount service implementation, just put a breakpoint on the federate() call and see what you get. If you are using the built-in implementation classes, the typical issue to trip over is that you haven't configured or you've incorrectly configured the associate

Re: Tapestry-Security extend user session time

Here are the links to FlowLogix documentation: http://code.google.com/p/flowlogix/wiki/TLDocIndex http://code.google.com/p/flowlogix/wiki/TapestryLibrary http://code.google.com/p/flowlogix/ Example code: http://code.google.com/p/hope-website/ There are around 30 pages of documentation for 3000 l

Re: Tapestry-Security extend user session time

Not sure. Are you including tapestry security and tapestry exception page modules? That might be the trouble. On Jul 19, 2012, at 2:06 PM, George Christman wrote: > lprimak, I'm getting the following exception, would you happen to know what's > going on here? Thanks > > java.lang.RuntimeEx

Re: Tapestry-Security extend user session time

I believe this js library was written in prototype, is there a jquery version? -- View this message in context: http://tapestry.1045711.n5.nabble.com/Tapestry-Security-extend-user-session-time-tp5714610p5714617.html Sent from the Tapestry - User mailing list archive at Nabble.com. --

Re: Tapestry-Security extend user session time

lprimak, I'm getting the following exception, would you happen to know what's going on here? Thanks java.lang.RuntimeException: Exception loading module(s) from manifest jar:file:/C:/Users/gmc07/.m2/repository/com/flowlogix/flowlogix-tapestry/0.9.8/flowlogix-tapestry-0.9.8.jar!/META-INF/MANIFEST.M

Re: Tapestry-Security / Javascript auto logout

Good idea, didn't even give that a thought. -- View this message in context: http://tapestry.1045711.n5.nabble.com/Tapestry-Security-Javascript-auto-logout-tp5714608p5714615.html Sent from the Tapestry - User mailing list archive at Nabble.com. --

Re: Tapestry-Security / Javascript auto logout

It doesn't necessarily have to be a completely separate page - you can generate a URL for a "logout" event and give that URL to the jquery plugin. Cheers - Alex K On Thu, Jul 19, 2012 at 12:50 PM, George Christman wrote: > Hello I'm using tapestry security and a jQuery session timeout plugin. Th

Re: Tapestry-Security extend user session time

There is full documentation and examples on the site. You just have to click around. On Jul 19, 2012, at 1:33 PM, George Christman wrote: > Hi lprimak, I can't seem to figure out how to use FlowLogix. Do you know > where I might be able to find examples etc? The website link that is suppose

Re: Tapestry-Security extend user session time

Hi lprimak, I can't seem to figure out how to use FlowLogix. Do you know where I might be able to find examples etc? The website link that is suppose to link to some examples comes up with none. I don't know what it means when it says it houses common components like shiro security etc and how it w

Re: Tapestry-Security extend user session time

Don't know what that has I do with jquery but the FlowLogix library has a session timeout component that takes care of this requirement. On Jul 19, 2012, at 1:19 PM, George Christman wrote: > Hello, I'm using tapestry-security and a jQuery sessionTimeout plugin. One of > the options in the plu

Re: Tapestry Security - AuthorizingRealm No Cache

Thanks Kalle -- View this message in context: http://tapestry.1045711.n5.nabble.com/Tapestry-Security-AuthorizingRealm-No-Cache-tp5714488p5714490.html Sent from the Tapestry - User mailing list archive at Nabble.com. - To unsubs

Re: Tapestry Security - AuthorizingRealm No Cache

On Mon, Jul 16, 2012 at 10:36 AM, George Christman wrote: > Hello, I'm using tapestry-security and I'm seeing "realm.AuthorizingRealm No > cache or cacheManager properties have been set. Authorization cache cannot > be obtained" appear numerous times in my console. I was wondering if anybody > ha

Re: tapestry-security and CAS integration?

There's an issue open for it (http://jira.codehaus.org/browse/TYNAMO-150), I'll put it in for the next version. Kalle On Fri, May 18, 2012 at 10:13 AM, Chris Cureau wrote: > Since Apache Shiro 1.2.0, there is a plugin that allows Schiro to > communicate directly with CAS SSO server.  Has this f

Re: tapestry-security with jdbcrealm

Kalle, Thanks for the prompt & thorough response! I will dig into the docs & samples you've pointed me to & return here if I have more questions. -- View this message in context: http://tapestry.1045711.n5.nabble.com/tapestry-security-with-jdbcrealm-tp5711720p5711875.html Sent from the Tapestry

Re: tapestry-security with jdbcrealm

On Thu, May 17, 2012 at 8:04 PM, kc22033 wrote: > I am struggling with getting tapestry-security working using the jdbcrealm. > I've read the tapestry-security guide over and over again. I've searched > using every keyword I can come up with. I find lots of people saying "it's > easy" and "it's do

Re: tapestry-security w/ Remote Login

Thanks so much Kalle. I've come up with some free time outside of work, so I'm going to take advantage of it and start playing with the facebook integration using the federate project. Hopefully that goes much smoother than my work related stuff. :) -- View this message in context: http://tapestr

Re: tapestry-security w/ Remote Login

On Tue, May 1, 2012 at 10:12 AM, George Christman wrote: > Hello Kalle, I've finally got this to work :) Our other developer ended up > rewriting his code to be much friendlier to work with. Anyhow I have one > last question, he's returning a list of roles to me which I need to populate > SimpleAu

Re: tapestry-security w/ Remote Login

Hello Kalle, I've finally got this to work :) Our other developer ended up rewriting his code to be much friendlier to work with. Anyhow I have one last question, he's returning a list of roles to me which I need to populate SimpleAuthorizationInfo with. Could you explain how I would get the list o

Re: tapestry-security 0.4.4 custom login form question

On Apr 20, 2012, at 3:01 PM, Kalle Korhonen wrote: On Fri, Apr 20, 2012 at 11:44 AM, Norman Franke wrote: I'm in the process of upgrading from tapestry-security 0.3.1 to 0.4.4. Other than the two extra dependencies, I'm having problems with my custom login form. This no longer works now t

Re: tapestry-security 0.4.4 custom login form question

On Fri, Apr 20, 2012 at 11:44 AM, Norman Franke wrote: > I'm in the process of upgrading from tapestry-security 0.3.1 to 0.4.4. Other > than the two extra dependencies, I'm having problems with my custom login > form. > This no longer works now that it's storing the URL in a cookie. Looking at > L

Re: tapestry-security w/ Remote Login

On Thu, Apr 19, 2012 at 9:10 AM, George Christman wrote: > Hi Kalle, I know it's been some time since we last spoke about this project. > I'm getting started with it again and had a question for you. When you said > I could call Subject.login in my isAuthorized method, were you referring to > some

Re: tapestry-security w/ Remote Login

Hi Kalle, I know it's been some time since we last spoke about this project. I'm getting started with it again and had a question for you. When you said I could call Subject.login in my isAuthorized method, were you referring to something like this? @Override protected boolean isAuthorized

Re: tapestry-security 0.4.4 released!

And thanks for the Doc update on @AutoBuild -- View this message in context: http://tapestry.1045711.n5.nabble.com/tapestry-security-0-4-4-released-tp5604723p5604969.html Sent from the Tapestry - User mailing list archive at Nabble.com. ---

Re: tapestry-security 0.4.4 released!

Works for me so far in a non root context! My mail reader is so excited it got a 404. http://tynamo.org/tapestry-security+guide Thanks Barry -- View this message in context: http://tapestry.1045711.n5.nabble.com/tapestry-security-0-4-4-released-tp5604723p5604968.html Sent from the Tapestry - Us

Re: Tapestry security: standart way to get an user object?

On Wed, Mar 28, 2012 at 2:57 PM, Crentana wrote: > Im quite new to tapestry and tapestry-security. But i cant find a way to get > an user object. I guess I have to query the db whenever I need it? (I know > Subject.getPrincipal, but im asking because i could imagine there is a > standard way.) I'

Re: tapestry-security 0.4.3 released!

Cool.Will expect a patch release soon :) On Wed, Mar 21, 2012 at 11:20 PM, Kalle Korhonen wrote: > Yes.. https://jira.codehaus.org/browse/TYNAMO-145. > > Kalle > > > On Wed, Mar 21, 2012 at 2:06 PM, Dimitris Zenios > wrote: >> I think there is a bug slipped in the latest 0.4.3 release.I get a >>

Re: tapestry-security 0.4.3 released!

Yes.. https://jira.codehaus.org/browse/TYNAMO-145. Kalle On Wed, Mar 21, 2012 at 2:06 PM, Dimitris Zenios wrote: > I think there is a bug slipped in the latest 0.4.3 release.I get a > org.apache.shiro.subject.ExecutionException: > java.lang.IllegalStateException: > org.apache.shiro.session.Inva

Re: tapestry-security 0.4.3 released!

I think there is a bug slipped in the latest 0.4.3 release.I get a org.apache.shiro.subject.ExecutionException: java.lang.IllegalStateException: org.apache.shiro.session.InvalidSessionException: java.lang.IllegalStateException when a user logouts from a page that has @RequiresRoles annotation.This

Re: tapestry-security 0.4.3 released!

That's interesting. I did not know you could bind an abstract class instead of an interface. -- View this message in context: http://tapestry.1045711.n5.nabble.com/tapestry-security-0-4-3-released-tp5574027p5576063.html Sent from the Tapestry - User mailing list archive at Nabble.com. --

Re: tapestry-security 0.4.3 released!

On Sun, Mar 18, 2012 at 3:41 PM, trsvax wrote: > I guess I've just gotten in the habit of making everything a service with an > Interface. Class reloading without a restart is pretty handy, but in this Of course, you can make it a service, you just don't need to. If you nevertheless do, you need

Re: tapestry-security 0.4.3 released!

I guess I've just gotten in the habit of making everything a service with an Interface. Class reloading without a restart is pretty handy, but in this case you are correct the following is the way to go: public static void contributeWebSecurityManager(Configuration configuration, UserDAO userDAO)

Re: tapestry-security 0.4.3 released!

On Sun, Mar 18, 2012 at 2:43 PM, trsvax wrote: > I see what the problem is although now I not sure why it works at all. I have > this in my AppModule > binder.bind(Realm.class, UserRealm.class); > public static void contributeWebSecurityManager(Configuration > configuration, Realm userRealm) { >  

Re: tapestry-security 0.4.3 released!

I see what the problem is although now I not sure why it works at all. I have this in my AppModule binder.bind(Realm.class, UserRealm.class); and public static void contributeWebSecurityManager(Configuration configuration, Realm userRealm) { configuration.add(userRealm); } but

Re: tapestry-security 0.4.3 released!

Tried 0.4.1 and I have the same problem. I'll see if I can track it down and report back. -- View this message in context: http://tapestry.1045711.n5.nabble.com/tapestry-security-0-4-3-released-tp5574027p5575350.html Sent from the Tapestry - User mailing list archive at Nabble.com. -

Re: tapestry-security 0.4.3 released!

On Sun, Mar 18, 2012 at 6:56 AM, trsvax wrote: > Thanks for the update but when I upgraded from 0.4.0 I can authenticate but > my roles quit working. When I run the app in debug mode it appears > protected AuthorizationInfo doGetAuthorizationInfo(PrincipalCollection > principals) > in my UserRealm

Re: tapestry-security 0.4.3 released!

Thanks for the update but when I upgraded from 0.4.0 I can authenticate but my roles quit working. When I run the app in debug mode it appears protected AuthorizationInfo doGetAuthorizationInfo(PrincipalCollection principals) in my UserRealm is not called. It does get called in 0.4.0. My UserRe

Re: tapestry-security w/ Remote Login

On Thu, Feb 23, 2012 at 7:14 AM, George Christman wrote: > Hi Kalle, I spent sometime this morning reading over > tynamo-federatedaccounts, however I noticed the majority of the links were > broken. It doesn't appear to be very clear to me how closely related the 2/21 links by my count were broke

Re: tapestry-security w/ Remote Login

Hi Kalle, I spent sometime this morning reading over tynamo-federatedaccounts, however I noticed the majority of the links were broken. It doesn't appear to be very clear to me how closely related the facebook/twitter samples would be to me. I'd like to show you a sample of what I've been given to

Re: tapestry-security w/ Remote Login

On Wed, Feb 22, 2012 at 11:50 AM, George Christman wrote: > Hi Kalle, I apologize,  I misspoke in my previous post. Our remote sso > doesn't serve as an authorization protocol, I meant to say it serves as a Well, it's partly an authorization protocol if it returns you roles specific to the local

Re: tapestry-security w/ Remote Login

Hi Kalle, I apologize, I misspoke in my previous post. Our remote sso doesn't serve as an authorization protocol, I meant to say it serves as a Authentication protocol. We are using web.xml filters to trigger Authentication. Once the user has been authenticated, the service returns a user Id and l

Re: tapestry-security w/ Remote Login

Federatedaccounts (http://tynamo.org/tynamo-federatedaccounts+guide) is exactly for these use cases. You would have to implement your own authentication provider. It's interesting that your remote SSO service serves as an authorization protocol as well, I'd probably handle it as a merged local auth

Re: tapestry-security

On Thu, Dec 29, 2011 at 11:31 PM, angelochen wrote: > One more question, when you go to a @RequiresAuthentication page, it will > show the login page, that's good, then, the url in the browser does not > change, seems it just do a forward, is there a way to do a redirect instead > so the url got c

Re: tapestry-security

Hi, One more question, when you go to a @RequiresAuthentication page, it will show the login page, that's good, then, the url in the browser does not change, seems it just do a forward, is there a way to do a redirect instead so the url got changed in the browser? thanks, Angelo -- View this mes

  1   2   >