Re: [Acegisecurity-developer] Preparing for 0.9.0

2005-11-04 Thread Patrick Huber
Works for me, yet my application is pretty small.

I've had to change a call in the authentication tag.
I'm using pretty much every component except for instance-based
security. I use them a described in the docs/tutorials.


2005/11/3, Ben Alex <[EMAIL PROTECTED]>:
> Hi everyone
>
> CVS now contains pretty much all the tasks scheduled for 0.9.0. The
> roadmap is at:
>
> http://opensource2.atlassian.com/projects/spring/browse/SEC?report=com.atlassian.jira.plugin.system.project:roadmap-panel
>
> I'd be grateful if people using CVS could checkout and provide feedback
> on the changes / stability of the code over the next couple of days so
> that we can release.
>
> Cheers
> Ben
>
>
> ---
> SF.Net email is sponsored by:
> Tame your development challenges with Apache's Geronimo App Server. Download
> it for free - -and be entered to win a 42" plasma tv or your very own
> Sony(tm)PSP.  Click here to play: http://sourceforge.net/geronimo.php
> ___
> Home: http://acegisecurity.sourceforge.net
> Acegisecurity-developer mailing list
> Acegisecurity-developer@lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/acegisecurity-developer
>


--
"I love deadlines. I like the whooshing sound they make as they fly
by." -- Douglas Adams


---
SF.Net email is sponsored by:
Tame your development challenges with Apache's Geronimo App Server. Download
it for free - -and be entered to win a 42" plasma tv or your very own
Sony(tm)PSP.  Click here to play: http://sourceforge.net/geronimo.php
___
Home: http://acegisecurity.sourceforge.net
Acegisecurity-developer mailing list
Acegisecurity-developer@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/acegisecurity-developer


Re: [Acegisecurity-developer] Acegi and JSR-168 portlets

2005-11-04 Thread Patrick Huber
Hi

I'm very interested in this topic too. I'm currently working on a
thesis which will include creating some sort of intranet portal with
Portlets. Does Acegi work with Portlets (read: SpringPortlets)?

I couldn't find much information on that topic. I think it could work
right away if acegi is wrapped around the complete portlet container
which has to have a dispatcher servlet of some sort just like the
spring mvc dispatcher servlet. But I don't think there is, at the
moment, 'native' portlet support in acegi. Is this correct??

Thank,
Patrick



2005/11/2, Ballard, Ken <[EMAIL PROTECTED]>:
> Hi,
>
> I'm pushing for my company to use Acegi. At some point my company will
> probably start using JSR-168 portlets and it would help if I could show that
> Acegi's security framwork will work with a portal application (probaly
> WebSphere or JetSpeed). Will Acegi support this?
>
> Thanks,
> Ken
>
>
>
> ---
> SF.Net email is sponsored by:
> Tame your development challenges with Apache's Geronimo App Server. Download
> it for free - -and be entered to win a 42" plasma tv or your very own
> Sony(tm)PSP.  Click here to play: http://sourceforge.net/geronimo.php
> ___
> Home: http://acegisecurity.sourceforge.net
> Acegisecurity-developer mailing list
> Acegisecurity-developer@lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/acegisecurity-developer
>


--
"I love deadlines. I like the whooshing sound they make as they fly
by." -- Douglas Adams


---
SF.Net email is sponsored by:
Tame your development challenges with Apache's Geronimo App Server. Download
it for free - -and be entered to win a 42" plasma tv or your very own
Sony(tm)PSP.  Click here to play: http://sourceforge.net/geronimo.php
___
Home: http://acegisecurity.sourceforge.net
Acegisecurity-developer mailing list
Acegisecurity-developer@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/acegisecurity-developer


Re: [Acegisecurity-developer] Acegi and JSR-168 portlets

2005-11-04 Thread Patrick Huber
I just had another thought.
Acegi uses Servlet Filters for Servlets. So we'd probably use Portlet
Filters for Portlets. Makes the update for Portlets look rather small.

But the bad News is: Portlet Filters were deferred to a Portlet spec
version > 1.0

2005/11/4, Patrick Huber <[EMAIL PROTECTED]>:
> Hi
>
> I'm very interested in this topic too. I'm currently working on a
> thesis which will include creating some sort of intranet portal with
> Portlets. Does Acegi work with Portlets (read: SpringPortlets)?
>
> I couldn't find much information on that topic. I think it could work
> right away if acegi is wrapped around the complete portlet container
> which has to have a dispatcher servlet of some sort just like the
> spring mvc dispatcher servlet. But I don't think there is, at the
> moment, 'native' portlet support in acegi. Is this correct??
>
> Thank,
> Patrick
>
>
>
> 2005/11/2, Ballard, Ken <[EMAIL PROTECTED]>:
> > Hi,
> >
> > I'm pushing for my company to use Acegi. At some point my company will
> > probably start using JSR-168 portlets and it would help if I could show that
> > Acegi's security framwork will work with a portal application (probaly
> > WebSphere or JetSpeed). Will Acegi support this?
> >
> > Thanks,
> > Ken
> >
> >
> >
> > ---
> > SF.Net email is sponsored by:
> > Tame your development challenges with Apache's Geronimo App Server. Download
> > it for free - -and be entered to win a 42" plasma tv or your very own
> > Sony(tm)PSP.  Click here to play: http://sourceforge.net/geronimo.php
> > ___
> > Home: http://acegisecurity.sourceforge.net
> > Acegisecurity-developer mailing list
> > Acegisecurity-developer@lists.sourceforge.net
> > https://lists.sourceforge.net/lists/listinfo/acegisecurity-developer
> >
>
>
> --
> "I love deadlines. I like the whooshing sound they make as they fly
> by." -- Douglas Adams
>


--
"I love deadlines. I like the whooshing sound they make as they fly
by." -- Douglas Adams


---
SF.Net email is sponsored by:
Tame your development challenges with Apache's Geronimo App Server. Download
it for free - -and be entered to win a 42" plasma tv or your very own
Sony(tm)PSP.  Click here to play: http://sourceforge.net/geronimo.php
___
Home: http://acegisecurity.sourceforge.net
Acegisecurity-developer mailing list
Acegisecurity-developer@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/acegisecurity-developer


[Acegisecurity-developer] Problem checking out from CVS with Maven

2005-11-04 Thread Ballard, Ken
Hi,

Someone I work with pointed out that the instructions for checking out Maven
[http://www.acegisecurity.org/building.html] don't work. It might just be
because the SCM plugin has deprecated maven.scm.method,
maven.scm.cvs.module, maven.scm.method, and maven.scm.cvs.root. I tried to
use other properties, but I don't have a CVS client (We use SVN and
StarTeam). I think it would be a quick fix. I'll try to download a CVS
client when I get a chance and try it with other properties.

Thanks,
Ken


---
SF.Net email is sponsored by:
Tame your development challenges with Apache's Geronimo App Server. Download
it for free - -and be entered to win a 42" plasma tv or your very own
Sony(tm)PSP.  Click here to play: http://sourceforge.net/geronimo.php
___
Home: http://acegisecurity.sourceforge.net
Acegisecurity-developer mailing list
Acegisecurity-developer@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/acegisecurity-developer


Re: [Acegisecurity-developer] Preparing for 0.9.0

2005-11-04 Thread Ray Krueger
Hey Ben,
I jumped on http://opensource2.atlassian.com/projects/spring/browse/SEC-23
(Jaas Logout) even after we said we'd put it off till 1.0. I'll be
committing it shortly...




On 11/3/05, Ben Alex <[EMAIL PROTECTED]> wrote:
> Hi everyone
>
> CVS now contains pretty much all the tasks scheduled for 0.9.0. The
> roadmap is at:
>
> http://opensource2.atlassian.com/projects/spring/browse/SEC?report=com.atlassian.jira.plugin.system.project:roadmap-panel
>
> I'd be grateful if people using CVS could checkout and provide feedback
> on the changes / stability of the code over the next couple of days so
> that we can release.
>
> Cheers
> Ben
>
>
> ---
> SF.Net email is sponsored by:
> Tame your development challenges with Apache's Geronimo App Server. Download
> it for free - -and be entered to win a 42" plasma tv or your very own
> Sony(tm)PSP.  Click here to play: http://sourceforge.net/geronimo.php
> ___
> Home: http://acegisecurity.sourceforge.net
> Acegisecurity-developer mailing list
> Acegisecurity-developer@lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/acegisecurity-developer
>


---
SF.Net email is sponsored by:
Tame your development challenges with Apache's Geronimo App Server. Download
it for free - -and be entered to win a 42" plasma tv or your very own
Sony(tm)PSP.  Click here to play: http://sourceforge.net/geronimo.php
___
Home: http://acegisecurity.sourceforge.net
Acegisecurity-developer mailing list
Acegisecurity-developer@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/acegisecurity-developer


Re: [Acegisecurity-developer] Problem checking out from CVS with Maven

2005-11-04 Thread Carlos Sanchez
It works for me in maven 1.1-beta-2. Deprecated properties still work.

On 11/4/05, Ballard, Ken <[EMAIL PROTECTED]> wrote:
> Hi,
>
> Someone I work with pointed out that the instructions for checking out Maven
> [http://www.acegisecurity.org/building.html] don't work. It might just be
> because the SCM plugin has deprecated maven.scm.method,
> maven.scm.cvs.module, maven.scm.method, and maven.scm.cvs.root. I tried to
> use other properties, but I don't have a CVS client (We use SVN and
> StarTeam). I think it would be a quick fix. I'll try to download a CVS
> client when I get a chance and try it with other properties.
>
> Thanks,
> Ken
>
>
> ---
> SF.Net email is sponsored by:
> Tame your development challenges with Apache's Geronimo App Server. Download
> it for free - -and be entered to win a 42" plasma tv or your very own
> Sony(tm)PSP.  Click here to play: http://sourceforge.net/geronimo.php
> ___
> Home: http://acegisecurity.sourceforge.net
> Acegisecurity-developer mailing list
> Acegisecurity-developer@lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/acegisecurity-developer
>


---
SF.Net email is sponsored by:
Tame your development challenges with Apache's Geronimo App Server. Download
it for free - -and be entered to win a 42" plasma tv or your very own
Sony(tm)PSP.  Click here to play: http://sourceforge.net/geronimo.php
___
Home: http://acegisecurity.sourceforge.net
Acegisecurity-developer mailing list
Acegisecurity-developer@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/acegisecurity-developer


Re: [Acegisecurity-developer] Problem checking out from CVS with Maven

2005-11-04 Thread Ray Krueger
I'm pretty sure the Maven scm plugin requires you to have the cvs
client in your path in order to check out from cvs. You'll need to
install the cvs client first.

For Windows:
http://www.march-hare.com/cvspro/#free
or
http://www.wincvs.org/



On 11/4/05, Carlos Sanchez <[EMAIL PROTECTED]> wrote:
> It works for me in maven 1.1-beta-2. Deprecated properties still work.
>
> On 11/4/05, Ballard, Ken <[EMAIL PROTECTED]> wrote:
> > Hi,
> >
> > Someone I work with pointed out that the instructions for checking out Maven
> > [http://www.acegisecurity.org/building.html] don't work. It might just be
> > because the SCM plugin has deprecated maven.scm.method,
> > maven.scm.cvs.module, maven.scm.method, and maven.scm.cvs.root. I tried to
> > use other properties, but I don't have a CVS client (We use SVN and
> > StarTeam). I think it would be a quick fix. I'll try to download a CVS
> > client when I get a chance and try it with other properties.
> >
> > Thanks,
> > Ken
> >
> >
> > ---
> > SF.Net email is sponsored by:
> > Tame your development challenges with Apache's Geronimo App Server. Download
> > it for free - -and be entered to win a 42" plasma tv or your very own
> > Sony(tm)PSP.  Click here to play: http://sourceforge.net/geronimo.php
> > ___
> > Home: http://acegisecurity.sourceforge.net
> > Acegisecurity-developer mailing list
> > Acegisecurity-developer@lists.sourceforge.net
> > https://lists.sourceforge.net/lists/listinfo/acegisecurity-developer
> >
>
>
> ---
> SF.Net email is sponsored by:
> Tame your development challenges with Apache's Geronimo App Server. Download
> it for free - -and be entered to win a 42" plasma tv or your very own
> Sony(tm)PSP.  Click here to play: http://sourceforge.net/geronimo.php
> ___
> Home: http://acegisecurity.sourceforge.net
> Acegisecurity-developer mailing list
> Acegisecurity-developer@lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/acegisecurity-developer
>


---
SF.Net email is sponsored by:
Tame your development challenges with Apache's Geronimo App Server. Download
it for free - -and be entered to win a 42" plasma tv or your very own
Sony(tm)PSP.  Click here to play: http://sourceforge.net/geronimo.php
___
Home: http://acegisecurity.sourceforge.net
Acegisecurity-developer mailing list
Acegisecurity-developer@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/acegisecurity-developer


[Acegisecurity-developer] AclVoter expecting SimpleAclEntry

2005-11-04 Thread Tim Kettering
I ran into a interesting problem when setting up AclVoters for our project.

We are using our own custom AclEntry that subclasses
AbstractBasicAclEntry.  So when I tried to set up a class that uses
AclVoter, I got a ClassCastException at this particular section:

for(int i = 0; i < entries.length; i++) {
SimpleAclEntry sae = (SimpleAclEntry)entries[i];
for(int j = 0; j < requirePermission.length; j++) {
   if(sae.isPermitted(requirePermission[j])) {
   result = ACCESS_GRANTED;
   }
  }
}

So, from this, it seems that we are casting to SimpleAclEntry because
we need to access the method .isPermitted().  But this method is
defined in AbstractBasicAclEntry.  However because it is abstract, we
cannot cast to that specifically...

So my subclass doesn't work, even though it has the method necessary
to work properly.

I think this can be improved...  it just seems rather odd for
BasicAclEntry to not declare the method, but the abstract
implementation does, and then SimpleAclEntry makes use of it?  This
doesn't lend well to making AclVoter very extensible.

I think could either add the methods to BasicAclEntry, or make another
interface to back the added functions that AbstractBasicAclEntry
brings to the table and update AclVoter accordingly.

Thanks!

-tim


---
SF.Net email is sponsored by:
Tame your development challenges with Apache's Geronimo App Server. Download
it for free - -and be entered to win a 42" plasma tv or your very own
Sony(tm)PSP.  Click here to play: http://sourceforge.net/geronimo.php
___
Home: http://acegisecurity.sourceforge.net
Acegisecurity-developer mailing list
Acegisecurity-developer@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/acegisecurity-developer


Re: [Acegisecurity-developer] Preparing for 0.9.0

2005-11-04 Thread Ben Alex

Patrick Huber wrote:


Works for me, yet my application is pretty small.

I've had to change a call in the authentication tag.
I'm using pretty much every component except for instance-based
security. I use them a described in the docs/tutorials.
 


Hi Patrick

Thanks for the feedback. I've added a note about that step to the 
upgrade instructions.


Anyone else had success with 0.9.0 in CVS?

Ben


---
SF.Net email is sponsored by:
Tame your development challenges with Apache's Geronimo App Server. Download
it for free - -and be entered to win a 42" plasma tv or your very own
Sony(tm)PSP.  Click here to play: http://sourceforge.net/geronimo.php
___
Home: http://acegisecurity.sourceforge.net
Acegisecurity-developer mailing list
Acegisecurity-developer@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/acegisecurity-developer


Re: [Acegisecurity-developer] Concurrent session check and username primary key issue

2005-11-04 Thread Ben Alex

Herryanto Siatono wrote:

I stepped through the code, and I realised that it does not work when 
UserDetails.getUsername() is overridden with user's primary key after 
successful login.


Simply because the session check is performed before the actual 
authentication takes place using the login username e.g. 'user1', 
while the registration of new session takes place after successful 
authentication using the already overriden .getUsername() with the 
user's primary key, e.g. '101'. So the ConcurrentLogin exception is 
never thrown in such case.


I've refactored concurrent session support extensively in preparation 
for 0.9.0. Is this still an issue if using the latest CVS HEAD code?


Cheers
Ben


---
SF.Net email is sponsored by:
Tame your development challenges with Apache's Geronimo App Server. Download
it for free - -and be entered to win a 42" plasma tv or your very own
Sony(tm)PSP.  Click here to play: http://sourceforge.net/geronimo.php
___
Home: http://acegisecurity.sourceforge.net
Acegisecurity-developer mailing list
Acegisecurity-developer@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/acegisecurity-developer


RE: [Acegisecurity-developer] Concurrent session check and username primary key issue

2005-11-04 Thread Herryanto Siatono
Yep Ben, I'm using yesterday's check out. 

Thx for the fast reply.

Cheers.

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of
Ben Alex
Sent: 05 November 2005 09:30
To: acegisecurity-developer@lists.sourceforge.net
Subject: Re: [Acegisecurity-developer] Concurrent session check and username
primary key issue

Herryanto Siatono wrote:

> I stepped through the code, and I realised that it does not work when 
> UserDetails.getUsername() is overridden with user's primary key after 
> successful login.
>
> Simply because the session check is performed before the actual 
> authentication takes place using the login username e.g. 'user1', 
> while the registration of new session takes place after successful 
> authentication using the already overriden .getUsername() with the 
> user's primary key, e.g. '101'. So the ConcurrentLogin exception is 
> never thrown in such case.
>
I've refactored concurrent session support extensively in preparation 
for 0.9.0. Is this still an issue if using the latest CVS HEAD code?

Cheers
Ben


---
SF.Net email is sponsored by:
Tame your development challenges with Apache's Geronimo App Server. Download
it for free - -and be entered to win a 42" plasma tv or your very own
Sony(tm)PSP.  Click here to play: http://sourceforge.net/geronimo.php
___
Home: http://acegisecurity.sourceforge.net
Acegisecurity-developer mailing list
Acegisecurity-developer@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/acegisecurity-developer



---
SF.Net email is sponsored by:
Tame your development challenges with Apache's Geronimo App Server. Download
it for free - -and be entered to win a 42" plasma tv or your very own
Sony(tm)PSP.  Click here to play: http://sourceforge.net/geronimo.php
___
Home: http://acegisecurity.sourceforge.net
Acegisecurity-developer mailing list
Acegisecurity-developer@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/acegisecurity-developer


Re: [Acegisecurity-developer] Concurrent session check and username primary key issue

2005-11-04 Thread Ben Alex

Herryanto Siatono wrote:

Yep Ben, I'm using yesterday's check out. 


Thx for the fast reply.
 



I've checked in a change that I believe will correct it by moving the 
sessionController.checkAuthenticationAllowed(Authentication) to after 
the ProviderManager authenticates successfully, and using the resultant 
Authentication object. This was not done before as ProviderManagers 
published events, but this is no longer the case so the change in 
location has no adverse implications. Please give ProviderManager v 1.9 
a try.


Cheers
Ben


---
SF.Net email is sponsored by:
Tame your development challenges with Apache's Geronimo App Server. Download
it for free - -and be entered to win a 42" plasma tv or your very own
Sony(tm)PSP.  Click here to play: http://sourceforge.net/geronimo.php
___
Home: http://acegisecurity.sourceforge.net
Acegisecurity-developer mailing list
Acegisecurity-developer@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/acegisecurity-developer


[Acegisecurity-developer] Re: Acegi and JSR-168 portlets

2005-11-04 Thread John Lewis

Ken & Patrick,

I've developed some initial JSR-168 Portlet support for Acegi.

It is a separate provider with its own implementation of 
AbstractAuthenticationToken, AuthenticationProvider, UserCache, etc.  
I've also provided a PortletSessionContextIntegrationInterceptor and 
PortletProcessingInterceptor.


One of the unique challenges of portlet development in this space is 
that filters are not applied to portlet requests, so none of the 
existing filter-based can be used with the portlets.  But with the two 
interceptors above I think it covers the basics and allows for use of 
MethodSecurityInterceptor and for the taglib in JSP content.


The main thing that is missing at this point is an equivalent of the 
URL-based security mechanisms such as FilterSecurityInterceptor.  Since 
portlet requests don't include traditional URLs, this is difficult to 
translate.  I think the best thing here will be to implement something 
parallel to the HandlerMapping classes that allows security to be 
applied in the same way.


I've posted the classes and some example application context entries on 
the Spring Portlet Wiki site.  You can download the file here:


http://opensource2.atlassian.com/confluence/spring/download/attachments/10/acegi-portlet.zip

At this point it is integrated with Acegi 0.8.3 and needs to be 
refactored for integration with 0.9.0.


I'm very interested in your feedback.  Let me know what you think.

John Lewis


Ballard, Ken wrote:


Hi,

I'm pushing for my company to use Acegi. At some point my company will
probably start using JSR-168 portlets and it would help if I could show that
Acegi's security framwork will work with a portal application (probaly
WebSphere or JetSpeed). Will Acegi support this?

Thanks,
Ken

 




---
SF.Net email is sponsored by:
Tame your development challenges with Apache's Geronimo App Server. Download
it for free - -and be entered to win a 42" plasma tv or your very own
Sony(tm)PSP.  Click here to play: http://sourceforge.net/geronimo.php
___
Home: http://acegisecurity.sourceforge.net
Acegisecurity-developer mailing list
Acegisecurity-developer@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/acegisecurity-developer


RE: [Acegisecurity-developer] Concurrent session check and username primary key issue

2005-11-04 Thread Herryanto Siatono
That will absolutely solve the problem, thx. The previous way was indeed a
bit odd, coz the check was before authentication.

Btw, is v1.9 really checked in? coz I'm still seeing 1.8 in the cvs. :)

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of
Ben Alex
Sent: 05 November 2005 11:50
To: acegisecurity-developer@lists.sourceforge.net
Subject: Re: [Acegisecurity-developer] Concurrent session check and username
primary key issue

Herryanto Siatono wrote:

>Yep Ben, I'm using yesterday's check out. 
>
>Thx for the fast reply.
>  
>
>
I've checked in a change that I believe will correct it by moving the 
sessionController.checkAuthenticationAllowed(Authentication) to after 
the ProviderManager authenticates successfully, and using the resultant 
Authentication object. This was not done before as ProviderManagers 
published events, but this is no longer the case so the change in 
location has no adverse implications. Please give ProviderManager v 1.9 
a try.

Cheers
Ben


---
SF.Net email is sponsored by:
Tame your development challenges with Apache's Geronimo App Server. Download
it for free - -and be entered to win a 42" plasma tv or your very own
Sony(tm)PSP.  Click here to play: http://sourceforge.net/geronimo.php
___
Home: http://acegisecurity.sourceforge.net
Acegisecurity-developer mailing list
Acegisecurity-developer@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/acegisecurity-developer



---
SF.Net email is sponsored by:
Tame your development challenges with Apache's Geronimo App Server. Download
it for free - -and be entered to win a 42" plasma tv or your very own
Sony(tm)PSP.  Click here to play: http://sourceforge.net/geronimo.php
___
Home: http://acegisecurity.sourceforge.net
Acegisecurity-developer mailing list
Acegisecurity-developer@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/acegisecurity-developer


Re: [Acegisecurity-developer] Concurrent session check and username primary key issue

2005-11-04 Thread Ben Alex

Herryanto Siatono wrote:


Btw, is v1.9 really checked in? coz I'm still seeing 1.8 in the cvs. :)
 


It's just the SF CVS sync delay. It'll show up in a few hours.


---
SF.Net email is sponsored by:
Tame your development challenges with Apache's Geronimo App Server. Download
it for free - -and be entered to win a 42" plasma tv or your very own
Sony(tm)PSP.  Click here to play: http://sourceforge.net/geronimo.php
___
Home: http://acegisecurity.sourceforge.net
Acegisecurity-developer mailing list
Acegisecurity-developer@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/acegisecurity-developer


[Acegisecurity-developer] AuthenticationFailurePasswordEvent - now it's gone, new issue props up

2005-11-04 Thread Herryanto Siatono

I just realized that AuthenticationFailurePasswordEvent has been
refactored/generalized to AuthenticationFailureBadCredentialsEvent.

In previous version, I'm using it to log only invalid attempts only by user
found in the database. Now with it being generalized I'll have to re-query
my database to check if the user exists in the database.



---
SF.Net email is sponsored by:
Tame your development challenges with Apache's Geronimo App Server. Download
it for free - -and be entered to win a 42" plasma tv or your very own
Sony(tm)PSP.  Click here to play: http://sourceforge.net/geronimo.php
___
Home: http://acegisecurity.sourceforge.net
Acegisecurity-developer mailing list
Acegisecurity-developer@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/acegisecurity-developer


Re: [Acegisecurity-developer] AuthenticationFailurePasswordEvent - now it's gone, new issue props up

2005-11-04 Thread Ben Alex

Herryanto Siatono wrote:


I just realized that AuthenticationFailurePasswordEvent has been
refactored/generalized to AuthenticationFailureBadCredentialsEvent.

In previous version, I'm using it to log only invalid attempts only by user
found in the database. Now with it being generalized I'll have to re-query
my database to check if the user exists in the database.
 

You can look inside the AuthenticationFailureBadCredentialsEvent by 
doing a getException(), and then seeing which exception it is (either 
BadCredentialsException or UsernameNotFoundException).



---
SF.Net email is sponsored by:
Tame your development challenges with Apache's Geronimo App Server. Download
it for free - -and be entered to win a 42" plasma tv or your very own
Sony(tm)PSP.  Click here to play: http://sourceforge.net/geronimo.php
___
Home: http://acegisecurity.sourceforge.net
Acegisecurity-developer mailing list
Acegisecurity-developer@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/acegisecurity-developer