Hi André,

Issue #1) The LoginModule has no injections. What you can do is to
lookup an ejb with your authentication logic.
This post does the same thing, but with javascript.
http://buildnplay.blogspot.ca/2012/12/tomee-and-jaas-with-javascript.html


[]s,
Thiago.

On Wed, Feb 6, 2013 at 10:36 AM, André Zimmermann <zimmi...@gmail.com> wrote:
> Hi
> Since very long time I'm trying to setup an environment with tomee / jpa and
> security. I was able to create an EJB Layer, which i can test like the
> following example, which is really nice.
>
> http://tomee.apache.org/examples-trunk/testing-security-3/README.html
>
> My first problem. How can I inject EntityManger to the LoginProvider. This
> example LoginProvider just returns static roles. I would like to make
> queries to the database and construct roles programatically. Or maybe I
> should not use JAAS (ServiceLoginProviderModule) for this kind of
> requirement.
>
> My second problem. I also added a jersey layer on top. I would like to test
> this layer with security. How i can do this? Are there any useful examples?
> I tried many frameworks like rest-assured which looks realy nice to me, but
> I couldn't figure out, how to configure web.xml without to declare
> security-constraints for each jax-rs service.
>
> It could not be so complicated, but it seems, that I am the only one with
> such problems. :-(
>
> Thanks allot for your help
>
>
>
> --
> View this message in context: 
> http://openejb.979440.n4.nabble.com/Testing-security-in-webapp-tp4660610.html
> Sent from the OpenEJB Dev mailing list archive at Nabble.com.

Reply via email to