I have tried to change the method into @GET @Path("/{id}") public User getUser(@PathParam("id") Long id) { if (securityService.isAuthenticated()) { return systemManager.getUser(id); } return null; }
and this seems to work, if I dont go to login url I cant access this. So does that mean that I can not use the annotations with rest but I have to do it manually? Please note: I didnt try to put the annotation on the class itself So my question about cookies remains, the problem is that this rest services will be access using the python code, and not the browser (I assume that browser helps in this case). So how do I then receive the cookie in response in the python. In other words how is the cookie send in the first place? I would prefer not to use the session for this, but how do I configure the shiro not to use the session for this, but use it in the normal application? Also how do I format my urls in the best way? And sadly I am purist :) again tnx -- View this message in context: http://tapestry.1045711.n5.nabble.com/Tapestry-Tynamo-Rest-and-security-integration-questions-tp5714525p5714573.html Sent from the Tapestry - User mailing list archive at Nabble.com. --------------------------------------------------------------------- To unsubscribe, e-mail: users-unsubscr...@tapestry.apache.org For additional commands, e-mail: users-h...@tapestry.apache.org