Re: T5.3.1 a simple security

2011-12-29 Thread angelochen
hi, This works, thanks, however, it seems I can't catch the exception: @OnEvent(EventConstants.SUCCESS) Class succcess() { AuthenticationToken authenticationToken = new UsernamePasswordToken(email, password, false); try { SecurityUtils.getSubject().login(authentic

Re: T5.3.1 a simple security

2011-12-29 Thread Kalle Korhonen
On Thu, Dec 29, 2011 at 9:09 AM, angelochen wrote: > thanks, that works. now I use my own login page, what needed to be set in > that log in page? Something like this: AuthenticationToken authenticationToken = new UsernamePasswordToken(username, password, rememberme);

Re: T5.3.1 a simple security

2011-12-29 Thread angelochen
hi, thanks, that works. now I use my own login page, what needed to be set in that log in page? currently I use a sessionState data to flag as logged in, with this tapestry-security, how to change? thanks. angelo -- View this message in context: http://tapestry.1045711.n5.nabble.com/T5-3-1-a-si

Re: T5.3.1 a simple security

2011-12-29 Thread Kalle Korhonen
On Thu, Dec 29, 2011 at 5:12 AM, angelochen wrote: > I follow the guide and added this to AppModule: > > public static void contributeWebSecurityManager(Configuration > configuration) { >                ExtendedPropertiesRealm realm = new > ExtendedPropertiesRealm("classpath:shiro-users.properties

Re: T5.3.1 a simple security

2011-12-29 Thread Lenny Primak
I would just write a simple realm. I never used the Shiro.ini authentication so I can't help you there. There is also Shiro mailing list. A sample of a unix authenticating realm in in the examples (hope project) in the FlowLogix library. It's really I easy to do. On Dec 29, 2011, at 8:12 AM

Re: T5.3.1 a simple security

2011-12-29 Thread angelochen
Hi, I follow the guide and added this to AppModule: public static void contributeWebSecurityManager(Configuration configuration) { ExtendedPropertiesRealm realm = new ExtendedPropertiesRealm("classpath:shiro-users.properties"); configuration.add(realm); }

Re: T5.3.1 a simple security

2011-12-28 Thread Chris Poulsen
Hi, I'd prefer a filter based solution based on something like spring security or apache shiro for a requirement like the one you mention. They are usually really easy to setup for the basic case and can be configured to handle something more complex later on, if necessary. A separate filter base

Re: T5.3.1 a simple security

2011-12-28 Thread angelochen
hi, right, that's what I was looking for. however, lprimak pointed me to that tynamo's security package, think might be time now to look at a more complete security package for future projects, applying that to a current, small project might be a good practice. Thanks, Angelo -- View this messag

Re: T5.3.1 a simple security

2011-12-28 Thread Taha Hafeez Siddiqi
This is a simple implementation http://tapestryjava.blogspot.com/2009/12/securing-tapestry-pages-with.html regards Taha On Dec 29, 2011, at 8:02 AM, angelochen wrote: > ok, i put it in the pom, it got around 800k in size, looks like i have to > read that doc, that's quite many. > > -- > View t

Re: T5.3.1 a simple security

2011-12-28 Thread angelochen
ok, i put it in the pom, it got around 800k in size, looks like i have to read that doc, that's quite many. -- View this message in context: http://tapestry.1045711.n5.nabble.com/T5-3-1-a-simple-security-tp5106576p5106613.html Sent from the Tapestry - User mailing list archive at Nabble.com. ---

Re: T5.3.1 a simple security

2011-12-28 Thread Lenny Primak
Tynamo Tapestry-Security was very simple for me. http://tynamo.org/tapestry-security+guide It does require some tweaking, which I did in, and there are examples in the flowlogix library http://code.google.com/p/flowlogix/ On Dec 28, 2011, at 8:59 PM, angelochen wrote: > Hi, > > I know there a

T5.3.1 a simple security

2011-12-28 Thread angelochen
Hi, I know there are many security solutions, what I'm looking is a very simple one: my app has a few pages all except login requires user signed, for that I checked a class by ApplicationStateManager. I'd like to redirect to login page if not sign in. hints? Thanks, Angelo -- View this messag