Re: change session id after login

2010-10-25 Thread Mike Oestereter
Hi

In my mind it is not a peculiar requirement but a basic security 101
requirement.
Session ID should change after login, after logoff and after reauth
(for sensitive operations).


On Wed, Oct 20, 2010 at 1:51 AM, Kalle Korhonen
 wrote:
> That's a rather peculiar requirement. Sessions are semi-managed by the
> container and I don't know of a container that would allow you to do
> that. If you used Shiro in native session mode, you could probably
> change the id but even then, you'd need to cast and use the
> implementation classes directly.
>
> Kalle
>
>
> On Tue, Oct 19, 2010 at 2:40 PM, Mike Oestereter
>  wrote:
>> The problem is that I don't want to invalidate the session from an
>> application point of view.
>>
>> After successful login I want to store details about the authenticated
>> user in the user session.
>>
>> I just want to kill the existing cookie and associate a new (and
>> different cookie) with the current session.
>>
>>
>> On Mon, Oct 18, 2010 at 3:13 PM, Thiago H. de Paula Figueiredo
>>  wrote:
>>>> Grabbing the session and invalidating directly does the trick but
>>>> you have to be sure this occurs at the end of the request - otherwise
>>>> Tapestry may try to reuse the session and because that has been
>>>> invalidated you'd get exceptions.
>>>
>>> As long as you invalidate it through Tapestry (Session.invalidate()) instead
>>> of directly through HttpSession.invalidate(), I don't think exceptions will
>>> be thrown.
>>
>> -
>> To unsubscribe, e-mail: users-unsubscr...@tapestry.apache.org
>> For additional commands, e-mail: users-h...@tapestry.apache.org
>>
>>
>
> -
> To unsubscribe, e-mail: users-unsubscr...@tapestry.apache.org
> For additional commands, e-mail: users-h...@tapestry.apache.org
>
>

-
To unsubscribe, e-mail: users-unsubscr...@tapestry.apache.org
For additional commands, e-mail: users-h...@tapestry.apache.org



Re: change session id after login

2010-10-19 Thread Mike Oestereter
The problem is that I don't want to invalidate the session from an
application point of view.

After successful login I want to store details about the authenticated
user in the user session.

I just want to kill the existing cookie and associate a new (and
different cookie) with the current session.


On Mon, Oct 18, 2010 at 3:13 PM, Thiago H. de Paula Figueiredo
 wrote:
>> Grabbing the session and invalidating directly does the trick but
>> you have to be sure this occurs at the end of the request - otherwise
>> Tapestry may try to reuse the session and because that has been
>> invalidated you'd get exceptions.
>
> As long as you invalidate it through Tapestry (Session.invalidate()) instead
> of directly through HttpSession.invalidate(), I don't think exceptions will
> be thrown.

-
To unsubscribe, e-mail: users-unsubscr...@tapestry.apache.org
For additional commands, e-mail: users-h...@tapestry.apache.org



Re: change session id after login

2010-10-19 Thread Mike Oestereter
On Mon, Oct 18, 2010 at 1:45 PM, Thiago H. de Paula Figueiredo
 > Are you sure? This doesn't make a lot of sense.
As you can have more than
> one session state object, changing the session id would be the same as
> invalidating the session. This would be a serious bug.
>

I'm pretty sure - will try and locate old code. I only have one
(explicit) session state object.

-
To unsubscribe, e-mail: users-unsubscr...@tapestry.apache.org
For additional commands, e-mail: users-h...@tapestry.apache.org



change session id after login

2010-10-18 Thread Mike Oestereter
Hi

How can I change the value of the JSESSIONID cookie  after
succcessfull login - failure to do this will result in a session
hijacking vulnerability.
I'm not using Spring or AECGI (sp?) and am not interested in it at the moment.

In tapestry 5.0 the value of the cookie (somewhat magically and
unexpectedly) changed when a new instance of my SessionState object
was created: e.g.

@SessionState
private MerchantState merchantState;

public void resetState(...) {
merchantState = null;
merchantState = new MerchantState();
...
}

With tapestry 5.1.0.5 The cookie value now remains the same.

Thanks

-
To unsubscribe, e-mail: users-unsubscr...@tapestry.apache.org
For additional commands, e-mail: users-h...@tapestry.apache.org



HttpOnly Cookie

2010-04-14 Thread Mike Oestereter
Hi

I would like to make tapestry append  '; HttpOnly' to the end of
whatever value tapestry decides to write for the "SET-COOKIE" header
when applicable.

Thanks

Mike

-
To unsubscribe, e-mail: users-unsubscr...@tapestry.apache.org
For additional commands, e-mail: users-h...@tapestry.apache.org



Re: 404 from onActivate

2010-03-19 Thread Mike Oestereter
That's what I'm doing at the moment, but is not what I want.
The result from the user's perspective is is a redirect 302 (or
something) to a 404, which I don't think makes sense?

On Fri, Mar 19, 2010 at 4:51 PM, Christian Riedel
 wrote:
> I would create an Error404.java page and redirect to it in case your 
> onActivate doesn't find a corresponding entity.
>
> Am 19.03.2010 um 15:04 schrieb Mike Oestereter:
>
>> Hello
>>
>> I've got a page that takes the context as parameter to produce a
>> result from db, e.g.:  http:/hostname/app/page/123
>>
>> If the db result for 123 does not exist I would like to throw a 404.
>>
>> Currently I'm using...
>>
>> Object onActivate(EventContext context) {
>>  //db lookup code to prepare page
>> }
>>
>> Is the best way to throw a custom error that gets picked up by the
>> ExceptionReport page and "rendered" with a status code of 404?
>>
>> Or is there a way to initialize/prepare the page earlier in the cycle
>> and detect the non existence of resource 123?
>>
>> Thanks
>> Theo
>>
>> -
>> To unsubscribe, e-mail: users-unsubscr...@tapestry.apache.org
>> For additional commands, e-mail: users-h...@tapestry.apache.org
>>
>
>
> -
> To unsubscribe, e-mail: users-unsubscr...@tapestry.apache.org
> For additional commands, e-mail: users-h...@tapestry.apache.org
>
>

-
To unsubscribe, e-mail: users-unsubscr...@tapestry.apache.org
For additional commands, e-mail: users-h...@tapestry.apache.org



404 from onActivate

2010-03-19 Thread Mike Oestereter
Hello

I've got a page that takes the context as parameter to produce a
result from db, e.g.:  http:/hostname/app/page/123

If the db result for 123 does not exist I would like to throw a 404.

Currently I'm using...

Object onActivate(EventContext context) {
  //db lookup code to prepare page
}

Is the best way to throw a custom error that gets picked up by the
ExceptionReport page and "rendered" with a status code of 404?

Or is there a way to initialize/prepare the page earlier in the cycle
and detect the non existence of resource 123?

Thanks
Theo

-
To unsubscribe, e-mail: users-unsubscr...@tapestry.apache.org
For additional commands, e-mail: users-h...@tapestry.apache.org



Re: PCI/Nessus scan of Tapestry application

2010-03-16 Thread Mike Oestereter
Thanks man

On Tue, Mar 16, 2010 at 6:21 PM, Thiago H. de Paula Figueiredo
 wrote:
> On Tue, 16 Mar 2010 12:22:13 -0300, Mike Oestereter
>  wrote:
>
>> I dont know how but I think 1) could be addressed by making tapestry
>> to "encode" action differently to say login-form in stead of
>> login.form or to adjust the handler - I'm sorry but I'm not up to
>> speed with the Tapestry internals.
>
> You'd need to change how Tapestry generates event URLs. I don't think it's
> worth the hassle.
>
>> But 2) I'm afraid is definitely a bug - I'll try and get the code for
>> org.apache.tapestry5.internal.services.URLEncoderImpl and make it work
>> better
>
> It's not a bug, as Tapestry purposefully encodes URLs in a different way to
> better support page activation context. You can override the URLEncoder with
> your own implemenation through Tapestry-IoC.
>
> --
> Thiago H. de Paula Figueiredo
> Independent Java, Apache Tapestry 5 and Hibernate consultant, developer, and
> instructor
> Owner, software architect and developer, Ars Machina Tecnologia da
> Informação Ltda.
> http://www.arsmachina.com.br
>
> -
> To unsubscribe, e-mail: users-unsubscr...@tapestry.apache.org
> For additional commands, e-mail: users-h...@tapestry.apache.org
>
>

-
To unsubscribe, e-mail: users-unsubscr...@tapestry.apache.org
For additional commands, e-mail: users-h...@tapestry.apache.org



Re: PCI/Nessus scan of Tapestry application

2010-03-16 Thread Mike Oestereter
Thanks Thiago

I dont know how but I think 1) could be addressed by making tapestry
to "encode" action differently to say login-form in stead of
login.form or to adjust the handler - I'm sorry but I'm not up to
speed with the Tapestry internals.

But 2) I'm afraid is definitely a bug - I'll try and get the code for
org.apache.tapestry5.internal.services.URLEncoderImpl and make it work
better

Anyway, all the best

On Tue, Mar 16, 2010 at 3:58 PM, Thiago H. de Paula Figueiredo
 wrote:
> On Tue, 16 Mar 2010 10:09:18 -0300, Mike Oestereter
>  wrote:
>
>> Hello everybody
>
> Hi!
>
>> We have 2 kinds of request that bother us:
>>
>> 1) requests like "/login.asp?blahbalh" or  "/login.htm" etc.
>>
>> 2) requests like
>> "/cgi/wsisa.dll/WService=wsbroker1/webtools/oscommand.w" or
>> "/cgi/go.cgi|id|" (that is probably against the HTTP spec?)
>
> There's some options available:
>
> 1) Use URL rewriting to direct these kind of requests to a page of your
> choice.
>
> 2) Implement a HttpServletRequestFilter to detect this and just send a 404
> error without any content. You should contribute it to the
> HttpServletRequestHandler service.
>
> --
> Thiago H. de Paula Figueiredo
> Independent Java, Apache Tapestry 5 and Hibernate consultant, developer, and
> instructor
> Owner, software architect and developer, Ars Machina Tecnologia da
> Informação Ltda.
> http://www.arsmachina.com.br
>
> -
> To unsubscribe, e-mail: users-unsubscr...@tapestry.apache.org
> For additional commands, e-mail: users-h...@tapestry.apache.org
>
>

-
To unsubscribe, e-mail: users-unsubscr...@tapestry.apache.org
For additional commands, e-mail: users-h...@tapestry.apache.org



PCI/Nessus scan of Tapestry application

2010-03-16 Thread Mike Oestereter
Hello everybody

We've successfully developed and deployed a payment manager
application written in Tapestry 5.1
The system with application is PCI certified. This requires a periodic
vulnerability scan by a PCI scanning vendor.
Basically the scanning vendor use Nessus to throw all kinds of
requests at the app to potentially idenitfy known vulnerabilities on a
system.

The problem or annoyance we have is that the tapestry app has to deal
with all kinds of arbitrary requests resulting in server errors
(500s). We would much rather return 404s.

We have 2 kinds of request that bother us:

1) requests like "/login.asp?blahbalh" or  "/login.htm" etc.
Tapestry does not like it:
org.apache.tapestry5.ioc.internal.util.TapestryException: Component
Login does not contain an embedded component with id 'htm'.
We have a page Login.class with a form on so requests like '/login'
and '/login.form' is handled as expected but not the likes of
"/login.cgi"

2) requests like
"/cgi/wsisa.dll/WService=wsbroker1/webtools/oscommand.w" or
"/cgi/go.cgi|id|" (that is probably against the HTTP spec?)
Tapestry does not like it:
java.lang.IllegalArgumentException: Input string 'WService=wsbroker1'
is not valid; the character '=' at position 9 is not valid.
at 
org.apache.tapestry5.internal.services.URLEncoderImpl.decode(URLEncoderImpl.java:143)

I guess that one could catch these exceptions on the ExceptionReport
page and then do some custom 404 thing, but it would be much nicer to
prevent these exceptions form happening in the first place.

Any ideas?

Thanks
Mike

-
To unsubscribe, e-mail: users-unsubscr...@tapestry.apache.org
For additional commands, e-mail: users-h...@tapestry.apache.org



Tap 5 / 4.1 - Dirty Form Warning?

2008-12-11 Thread Mike Oestereter
Hi

We may have to port a Tapestry 4.0 app to either Tapestry 4.1 or
(preferably) 5.0 depending on how easy it would be.

The 4.0 uses the tacos:DirtyFormWarning quite a lot. And we can't find
such a component in Tapestry 4.1 or 5.0.

Do you know of a similar component or feature in Tapestry 4.1 or 5.0?

Many Thanks

Mike

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



T5: strange behavior with body tag and zones inside components - complete simple example

2008-06-22 Thread Mike Oestereter
Hi

In the simple example below I get the correct result after clicking on
the "update: two" hyprlink (the correct zone is updated):

update: one (hyperlink)
UPDATED two

BUT when I modify the page .tml and put the body inside a
... in stead of only inside a
...

The following html source get generated by tapestry at the bottom of
the page and...


zone ids in component within form

2008-06-21 Thread Mike Oestereter
Hi

I've got a Person component that gets rendered within a loop.
Inside the Person.tml I've got a zone (zony) and an actionlink that should
update that zone.
A click on any (not the first) of the rendered ActionLinks incorrectly
updates the first zone "zony" (and not, say, "zony_1") - it appears that the
mapping is incorrect:

Tapestry.init({"zone":["zony","zony_0","zony_1"],"linkZone":[["email","zony"],["email_0","zony"],["email_1","zony"]]});

I think is should be rather..

Tapestry.init({"zone":["zony","zony_0","zony_1"],"linkZone":[["email","zony"],["email_0","zony_0"],["email_1","zony_1"]]});

I don't know how to fix it.

I tried to move the actionlink around (not in a block) - not luck. I also
tried implementing my own id scheme but I can't specify a property for t:id
inside t:zone.

Here are sniplets..

Person.tml:





contact
me





CallingPage.tml:





Any help would be appreciated

Thanks


Re: how to change cursor to hourglass during async event handling

2007-09-14 Thread Mike Oestereter
Thanks

This is what I did at the end. Its a bit in your face but it mostly
(besides the IE6 div bug) prevents users from clicking on something
else while the request is processing.



Loading...



On 9/13/07, andyhot <[EMAIL PROTECTED]> wrote:
> Use @contrib:AjaxStatus
> http://tapestry.apache.org/tapestry4.1/tapestry-contrib/componentreference/ajaxstatus.html
>
> ... or, for more control, see
> http://tapestry.apache.org/tapestry4.1/jsdoc/index.html
> the tapestry.fx.attachAjaxStatus method
>
>
> Mike Oestereter wrote:
> > Hi
> >
> > During a async call to a @EventListener method that takes quite long
> > (slow database connection) it would be nice to (like previously in
> > tacos) change the cursor to an hourglass (or equivalent).
> >
> > It would actually be quite nice as well if input to controls could be
> > disabled (at  least for a while) but that is another topic.
> >
> > Any advise? How do you guys do your async event handling?
> >
> > Any examples or pointers will be greatly appreciated
> >
> > Thanks in advance
> >
> > -
> > To unsubscribe, e-mail: [EMAIL PROTECTED]
> > For additional commands, e-mail: [EMAIL PROTECTED]
> >
> >
> >
>
> --
> Andreas Andreou - [EMAIL PROTECTED] - http://andyhot.di.uoa.gr
> Tapestry / Tacos developer
> Open Source / JEE Consulting
>
>
> -
> To unsubscribe, e-mail: [EMAIL PROTECTED]
> For additional commands, e-mail: [EMAIL PROTECTED]
>
>

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: how to change cursor to hourglass during async event handling

2007-09-14 Thread Mike Oestereter
Thanks a lot!!

On 9/13/07, andyhot <[EMAIL PROTECTED]> wrote:
> Use @contrib:AjaxStatus
> http://tapestry.apache.org/tapestry4.1/tapestry-contrib/componentreference/ajaxstatus.html
>
> ... or, for more control, see
> http://tapestry.apache.org/tapestry4.1/jsdoc/index.html
> the tapestry.fx.attachAjaxStatus method
>
>
> Mike Oestereter wrote:
> > Hi
> >
> > During a async call to a @EventListener method that takes quite long
> > (slow database connection) it would be nice to (like previously in
> > tacos) change the cursor to an hourglass (or equivalent).
> >
> > It would actually be quite nice as well if input to controls could be
> > disabled (at  least for a while) but that is another topic.
> >
> > Any advise? How do you guys do your async event handling?
> >
> > Any examples or pointers will be greatly appreciated
> >
> > Thanks in advance
> >
> > -
> > To unsubscribe, e-mail: [EMAIL PROTECTED]
> > For additional commands, e-mail: [EMAIL PROTECTED]
> >
> >
> >
>
> --
> Andreas Andreou - [EMAIL PROTECTED] - http://andyhot.di.uoa.gr
> Tapestry / Tacos developer
> Open Source / JEE Consulting
>
>
> -
> To unsubscribe, e-mail: [EMAIL PROTECTED]
> For additional commands, e-mail: [EMAIL PROTECTED]
>
>

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



how to change cursor to hourglass during async event handling

2007-09-13 Thread Mike Oestereter
Hi

During a async call to a @EventListener method that takes quite long
(slow database connection) it would be nice to (like previously in
tacos) change the cursor to an hourglass (or equivalent).

It would actually be quite nice as well if input to controls could be
disabled (at  least for a while) but that is another topic.

Any advise? How do you guys do your async event handling?

Any examples or pointers will be greatly appreciated

Thanks in advance

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: [4.1.2] EventListener and Effects

2007-09-13 Thread Mike Oestereter
thanks a lot i will try this

On 8/30/07, Igor Drobiazko <[EMAIL PROTECTED]> wrote:
> You can use the tapestry js api to attach the effects:
>
> 
>dojo.require("tapestry.fx");
>dojo.require("dojo.lfx");
>tapestry.fx.attachPostEffect("some_client_id_1", function(){return
> dojo.lfx.highlight("some_client_id_2", [255, 255, 184]) });
> 
>
> "some_client_id_1" is the id of the updated component. When the component is
> updated, the effect is triggered.
> "some_client_id_2" is the id of the component to attach the effect to.
>
> Igor
>
> On 8/30/07, Mike Oestereter <[EMAIL PROTECTED]> wrote:
> >
> > Hi
> >
> > I'm upgrading an app from 4.0 to 4.1.2.
> >
> > In the 4.0 app I have a PropertySelection that has eventListener
> > pointing to a @tacos:EventSubmit that has a
> > effects="template:{highlight:{any:'[255,255,184], 500, 500'}}"
> >
> > How do I get the effect thing to work in 4.1.2? My onchnage
> > EventListener annotation works well - I'm just missing the effects.
> >
> > Thanks
> >
> > -
> > To unsubscribe, e-mail: [EMAIL PROTECTED]
> > For additional commands, e-mail: [EMAIL PROTECTED]
> >
> >
>

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



[4.1.2] EventListener and Effects

2007-08-30 Thread Mike Oestereter
Hi

I'm upgrading an app from 4.0 to 4.1.2.

In the 4.0 app I have a PropertySelection that has eventListener
pointing to a @tacos:EventSubmit that has a
effects="template:{highlight:{any:'[255,255,184], 500, 500'}}"

How do I get the effect thing to work in 4.1.2? My onchnage
EventListener annotation works well - I'm just missing the effects.

Thanks

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: encrypt query string

2007-01-24 Thread Mike Oestereter

thanks everybody

On 1/24/07, Peter Schröder <[EMAIL PROTECTED]> wrote:

hi,

i remember a thread about encryption some time ago.

the essence of it was, that you send the parameters as is and add an encrypted 
hash of your parameters with it, so that you can be sure nobody modified them.

thats also the way we do it

-Ursprüngliche Nachricht-
Von: Mike Oestereter [mailto:[EMAIL PROTECTED]
Gesendet: Dienstag, 23. Januar 2007 21:06
An: Tapestry users
Betreff: encrypt query string

Hi

I want to encrypt (most of) the query string part of a tapestry webapp.

So instead of having an URL like..

http://localhost:8080/myapp/dir/Page,component.subcomponent.subsubcomp.subsubsubcomp.sdirect?sp=Sblahblah

..I would like something like..

http://localhost:8080/myapp/AJHKSGFDLJHAGSDFLHJSDLFAGSDFGLRMWNEBRMWNBEFSDFKJSHDFN
WLKDJSLKDJFLSKJDFL

I don't want to spend too much time on this so I was wondering if
anybody has done this before or have a quick answer?

Thanks


Cheers
Mike

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]


-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]




-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



encrypt query string

2007-01-23 Thread Mike Oestereter

Hi

I want to encrypt (most of) the query string part of a tapestry webapp.

So instead of having an URL like..

http://localhost:8080/myapp/dir/Page,component.subcomponent.subsubcomp.subsubsubcomp.sdirect?sp=Sblahblah

..I would like something like..

http://localhost:8080/myapp/AJHKSGFDLJHAGSDFLHJSDLFAGSDFGLRMWNEBRMWNBEFSDFKJSHDFN
WLKDJSLKDJFLSKJDFL

I don't want to spend too much time on this so I was wondering if
anybody has done this before or have a quick answer?

Thanks


Cheers
Mike

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: handle on component's enclosed components

2006-11-17 Thread Mike Oestereter

Yes,yes I know Tapestry has an API - I just don't know it that well!

I am NOT looking for the nested or the contained components of a page/component.

I'm specifically looking for only the components that is in the body
part of a surrounding component (rendered by a @RenderBody of Main
using my example).



On 11/17/06, Karthik N <[EMAIL PROTECTED]> wrote:

Look at the API docs

http://tapestry.apache.org/tapestry4/tapestry/apidocs/index.html

AbstractPage has getNestedComponent

AbstractPage extends AbstractComponent that has getComponents()

HTH

On 11/17/06, Mike Oestereter <[EMAIL PROTECTED]> wrote:
>
> Hi
>
> Say I've got the following on a template page where Main and Sub are
> components..
>
> 
>
>html
>
>
>
>
>
>more html
>
> 
>
>
> Is there a way to get in Main's class a handle on all the Sub
> components enclosed by Main without adding an explicit reference in
> each Sub to Main?
>
> Many thanks
>
> Mike
>
> -
> To unsubscribe, e-mail: [EMAIL PROTECTED]
> For additional commands, e-mail: [EMAIL PROTECTED]
>
>


--
Thanks, Karthik




-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



handle on component's enclosed components

2006-11-17 Thread Mike Oestereter

Hi

Say I've got the following on a template page where Main and Sub are
components..



  html

  
  
  

  more html




Is there a way to get in Main's class a handle on all the Sub
components enclosed by Main without adding an explicit reference in
each Sub to Main?

Many thanks

Mike

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



tapestry 4.* status

2006-10-19 Thread Mike Oestereter

Hi there

I see the tapestry website reports that 4.1 is no longer "unstable"
but "active".
Also that the "stable" 4.0.2 link disappeared although it is still downloadable.


Is 4.1 actively becoming stable or what is the status?


Cheers
Mike

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: AjaxLinkSubmit clicked twice directs to webserver root

2006-08-27 Thread Mike Oestereter

I found this problem on tacos-beta2 and it is still present in tacos4.

Since upgrading to tacos4 I experience a problem which I beloive is
related to this problem:
I have a list of recuring component groups each containing several
input components. For each of these recuring component groups there is
a "delete" link and finally an "add" link. After clicking the "add'
(and waiting for a while) and then clicking another "add" or a
"delete" the app directs to the webserver root.

Funny thing is that it used to work fine with tacos beta2.


On 8/27/06, Mike Oestereter <[EMAIL PROTECTED]> wrote:

Hi

I find that if I click on an AjaxLinkSubmit link twice - the second
time before the 1st click's result could be rendered - the browser
gets directed to the webserver root.

In other words if I am on http://localhost:8080/myapp/balhabla and I
click twice I get directed to http://localhost:8080/

It does not happen with AjaxSubmit.
It also does not happen with  AjaxDirectLink

Cheers
Mike



-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



AjaxLinkSubmit clicked twice directs to webserver root

2006-08-27 Thread Mike Oestereter

Hi

I find that if I click on an AjaxLinkSubmit link twice - the second
time before the 1st click's result could be rendered - the browser
gets directed to the webserver root.

In other words if I am on http://localhost:8080/myapp/balhabla and I
click twice I get directed to http://localhost:8080/

It does not happen with AjaxSubmit.
It also does not happen with  AjaxDirectLink

Cheers
Mike

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: DirtyFormWarning and tacos:AjaxForm

2006-08-24 Thread Mike Oestereter

I've been messing around with nightly builds of tacos and different
versions of dojo.
But It all seems to work very well with the tacos beta 2.
And on top of it all - it does not trigger the warning with
tacos:AjaxEventSubmit.
Excellent!!
Thanks

On 8/23/06, andyhot <[EMAIL PROTECTED]> wrote:

Mike Oestereter wrote:
> Hi
>
> The DirtyFormWarning and tacos:AjaxForm does not seem to work to
> nicely together.
I've got those working very nicely, what seems to be the problem?
Which tacos version are you using?

Anyway, if you feel there's a bug, add it at
http://tacoscomponents.jot.com/BugReporter

> Also, not with refresh events.
I haven't tested this one...
But according to this http://tacoscomponents.jot.com/BugReporter/Bug109
'Refresh and Cancel events are not working on AjaxForm'

BTW, I'll try to reselve Bug109 and then start the final 4.0 release for
tacos...
it's about time :)

>
> I know everything is in flux at the moment with Tap4.1 and seeing
> how/where the tacos components will fit in.
>
> But in the meantime.. are there any (current) plans to make the
> DirtyFormWarning component work with AjaxForm and/or also not to
> trigger on refresh events?
>
>
> Thanks
>
> -
> To unsubscribe, e-mail: [EMAIL PROTECTED]
> For additional commands, e-mail: [EMAIL PROTECTED]
>
>


--
Andreas Andreou - [EMAIL PROTECTED] - http://andyhot.di.uoa.gr
Tapestry / Tacos developer
Open Source / J2EE Consulting


-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]




-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



DirtyFormWarning and tacos:AjaxForm

2006-08-23 Thread Mike Oestereter

Hi

The DirtyFormWarning and tacos:AjaxForm does not seem to work to
nicely together.
Also, not with refresh events.

I know everything is in flux at the moment with Tap4.1 and seeing
how/where the tacos components will fit in.

But in the meantime.. are there any (current) plans to make the
DirtyFormWarning component work with AjaxForm and/or also not to
trigger on refresh events?


Thanks

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: Dialog size and position

2006-07-31 Thread Mike Oestereter

The demo app on the opencomponentry website initialy shows the dialog
popup centered in the browser window. But after a wrong password or
any subsequent renderings it is also displayed with the top left
corner centered in the browser window. I'm using mozilla on a mac.

On 7/31/06, Mike Oestereter <[EMAIL PROTECTED]> wrote:

Hello

I would like to use the tacos:Dialog component for more than just an
alternative to an alert box.
Kind of like a show modal window containing tables and forms etc. Also
doing partial ajax updates on this "Dialog".

First problem is that the top left corner of the popup is displayed in
the center of my browser window and remains there.

Second problem is that it does not show all containing html tables.

I'm not a CSS guru but I tried this wil no avail...
.dojoDialog {
position:absolute;
top: 10px;
left: 10px;
}


Any help or pointers would be appreciated.

Cheers
Mike



-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Dialog size and position

2006-07-31 Thread Mike Oestereter

Hello

I would like to use the tacos:Dialog component for more than just an
alternative to an alert box.
Kind of like a show modal window containing tables and forms etc. Also
doing partial ajax updates on this "Dialog".

First problem is that the top left corner of the popup is displayed in
the center of my browser window and remains there.

Second problem is that it does not show all containing html tables.

I'm not a CSS guru but I tried this wil no avail...
.dojoDialog {
position:absolute;
top: 10px;
left: 10px; 
}


Any help or pointers would be appreciated.

Cheers
Mike

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: stylesheet and asset

2006-07-28 Thread Mike Oestereter

sorry - not the final url but the final style string.

On 7/28/06, Mike Oestereter <[EMAIL PROTECTED]> wrote:

Thanks for your reply.

I think with your suggestion a component/page in a subdirectory under
"mywebapp" conect path will render correctly because the images is
relative to the css dir.

But it seems like the only way to benifit from the asset service's
i18n feutures is to use @Any component together with some ugly ognl
statement or alternatively use a page class method to lookup the asset
and "calculate" the final url?

Blah


On 7/28/06, Jesse Kuhnert <[EMAIL PROTECTED]> wrote:
> The same way you would with static html.
>
> A typical app might have a top level directory structure of:
>
> css/
> images/
> js/
> WEB-INF/
>
> If you have a stylesheet file with something like:
>
> .info {
>  background: url("images/button-center.gif") no-repeat top right;
> }
>
> Then you can do:
>
> 
>
> On 7/28/06, Mike Oestereter <[EMAIL PROTECTED]> wrote:
> >
> > Hi
> >
> > How do I define the style for an element to use an asset in stead of
> > the direct image, either as an inline style definition or
> > alternatively as a stylesheet ?
> >
> >  > style="background-image:url(img/button-center.gif);" >Blah
> >
> > Thanks
> >
> > -
> > To unsubscribe, e-mail: [EMAIL PROTECTED]
> > For additional commands, e-mail: [EMAIL PROTECTED]
> >
> >
>
>
> --
> Jesse Kuhnert
> Tacos/Tapestry, team member/developer
>
> Open source based consulting work centered around
> dojo/tapestry/tacos/hivemind.
>
>



-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: stylesheet and asset

2006-07-28 Thread Mike Oestereter

Thanks for your reply.

I think with your suggestion a component/page in a subdirectory under
"mywebapp" conect path will render correctly because the images is
relative to the css dir.

But it seems like the only way to benifit from the asset service's
i18n feutures is to use @Any component together with some ugly ognl
statement or alternatively use a page class method to lookup the asset
and "calculate" the final url?

Blah


On 7/28/06, Jesse Kuhnert <[EMAIL PROTECTED]> wrote:

The same way you would with static html.

A typical app might have a top level directory structure of:

css/
images/
js/
WEB-INF/

If you have a stylesheet file with something like:

.info {
 background: url("images/button-center.gif") no-repeat top right;
}

Then you can do:



On 7/28/06, Mike Oestereter <[EMAIL PROTECTED]> wrote:
>
> Hi
>
> How do I define the style for an element to use an asset in stead of
> the direct image, either as an inline style definition or
> alternatively as a stylesheet ?
>
>  style="background-image:url(img/button-center.gif);" >Blah
>
> Thanks
>
> -
> To unsubscribe, e-mail: [EMAIL PROTECTED]
> For additional commands, e-mail: [EMAIL PROTECTED]
>
>


--
Jesse Kuhnert
Tacos/Tapestry, team member/developer

Open source based consulting work centered around
dojo/tapestry/tacos/hivemind.




-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



stylesheet and asset

2006-07-28 Thread Mike Oestereter

Hi

How do I define the style for an element to use an asset in stead of
the direct image, either as an inline style definition or
alternatively as a stylesheet ?

Blah

Thanks

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: tacos double submit (add) problem

2006-07-16 Thread Mike Oestereter

I'm sorry but I can't log the bug.
I get a..
UnknownError
Error:
Additional information: element mismatch: got tr, expected table
Error code: d07ef8a4829443caa2e07475591b512701b84f45

When I leave the html/page/java out to (possibly?) add it later I get a..
Error: InsufficientPrivileges
Additional information: not authorized to add child
Error code: 1186a82a6e49347a24c06ca75d49097b58e1d1b0

Any other place to log this?



On 7/14/06, Mike Oestereter <[EMAIL PROTECTED]> wrote:

Will log the bug and use part1
And thanks alot.



On 7/13/06, [EMAIL PROTECTED] <[EMAIL PROTECTED]> wrote:
> Yep, i also saw the single 'add' behaviour.
> Your exact code results in the following issues:
> - when add is pressed once, submit behaves like add
> - when add is pressed more than once, submit triggers the
> delete button.
>
> I've already added your files to reproduce this, but SF wouldn't
> let me commit earlier on.
>
> I would advice you to also log an issue at
> http://tacoscomponents.jot.com/BugReporter
> and then revert to using updateComponents="ognl:{'part1'}"
> until we fix it.
>
> From Mike Oestereter <[EMAIL PROTECTED]>:
>
> > On 7/13/06, Andreas Andreou <[EMAIL PROTECTED]> wrote:
> > > - if you change everything to update part1, it works normally...
> > > Why do you say 'without the partial updates' ?
> >
> > You're right - I mean of course "without the partial updates" of only
> > the recurring items.
> >
> > > - if you leave it as is, the problem is that the doRemoveItem listener is
> > > somehow triggered when you click on the submit button. This results
> > > in an item removed and the iteration failing with the error message you
> > > described. I don't yet know why this is happening... :(
> >
> > I presume you are talking about clicking the "add" button more than
> > once. While adding the submission of values seems to me fine. Its only
> > on the final "submit" button that things go wrong.
> >
> > For what it is worth.. I had a similar problem also for a while after
> > a "submit" (I think with the normal @Form) that a component with id
> > "tx" was expected in stead of the "submit" (or otherway around) no
> > matter if I was adding or removing.
> >
> > Not sure if it helps.. After a single "add" it behaves like the "add"
> > action is being stored and repeated during the "submit"?
> >
> > Any case  -  if there is anything I can do besides testing please shout.
> >
> > >
> > > Mike Oestereter wrote:
> > > > Hello
> > > >
> > > > My code below works for the item delete - but a normal "submit" button
> > > > click after an "add" button click gives me an unexpected and
> > > > additional "add".
> > > > Also, if I do more than one "add" followed my a final "submit" the
> > > > whole thing goes out of sync with a..
> > > > Caused by: ognl.MethodFailedException: Method "setMyItemValue" failed
> > > > for object [EMAIL PROTECTED]
> > > > [java.lang.IndexOutOfBoundsException: Index: 4, Size: 4]
> > > >
> > > > It works fine if I take out  the Tacos/Ajax components - but then of
> > > > course also without the nice partial screen updates.
> > > >
> > > > If I use a @tacos:PartialFor instead of the normal @For then the whole
> > > > thing also goes out of sync.
> > > > A normal @Form also does not work.
> > > > To move the invocation form the "listener" to the "action" has not any
> > > > influence.
> > > > If I change the updateComponents of the add button to part1 [it
> > > > includes the form] in stead of part2 [does not include the form
> > > > component]  (this is not what I want) then the submission works - but
> > > > without the partial updates as I wanted and I might as well use normal
> > > > non-Ajaxy stuff.
> > > >
> > > > I'm using the tacos4-beta-3-20060710-1929. I want to use the MenuBar2
> > > > stuff.
> > > >
> > > > Thanks in advance
> > > >
> > > >
> > > >
> > > > This is my html
> > > >
> > > > > > >  value="ognl:new java.util.Date()"/>
> > > > > > > id="part1">
> > > >  

Re: tacos double submit (add) problem

2006-07-13 Thread Mike Oestereter

Will log the bug and use part1
And thanks alot.



On 7/13/06, [EMAIL PROTECTED] <[EMAIL PROTECTED]> wrote:

Yep, i also saw the single 'add' behaviour.
Your exact code results in the following issues:
- when add is pressed once, submit behaves like add
- when add is pressed more than once, submit triggers the
delete button.

I've already added your files to reproduce this, but SF wouldn't
let me commit earlier on.

I would advice you to also log an issue at
http://tacoscomponents.jot.com/BugReporter
and then revert to using updateComponents="ognl:{'part1'}"
until we fix it.

From Mike Oestereter <[EMAIL PROTECTED]>:

> On 7/13/06, Andreas Andreou <[EMAIL PROTECTED]> wrote:
> > - if you change everything to update part1, it works normally...
> > Why do you say 'without the partial updates' ?
>
> You're right - I mean of course "without the partial updates" of only
> the recurring items.
>
> > - if you leave it as is, the problem is that the doRemoveItem listener is
> > somehow triggered when you click on the submit button. This results
> > in an item removed and the iteration failing with the error message you
> > described. I don't yet know why this is happening... :(
>
> I presume you are talking about clicking the "add" button more than
> once. While adding the submission of values seems to me fine. Its only
> on the final "submit" button that things go wrong.
>
> For what it is worth.. I had a similar problem also for a while after
> a "submit" (I think with the normal @Form) that a component with id
> "tx" was expected in stead of the "submit" (or otherway around) no
> matter if I was adding or removing.
>
> Not sure if it helps.. After a single "add" it behaves like the "add"
> action is being stored and repeated during the "submit"?
>
> Any case  -  if there is anything I can do besides testing please shout.
>
> >
> > Mike Oestereter wrote:
> > > Hello
> > >
> > > My code below works for the item delete - but a normal "submit" button
> > > click after an "add" button click gives me an unexpected and
> > > additional "add".
> > > Also, if I do more than one "add" followed my a final "submit" the
> > > whole thing goes out of sync with a..
> > > Caused by: ognl.MethodFailedException: Method "setMyItemValue" failed
> > > for object [EMAIL PROTECTED]
> > > [java.lang.IndexOutOfBoundsException: Index: 4, Size: 4]
> > >
> > > It works fine if I take out  the Tacos/Ajax components - but then of
> > > course also without the nice partial screen updates.
> > >
> > > If I use a @tacos:PartialFor instead of the normal @For then the whole
> > > thing also goes out of sync.
> > > A normal @Form also does not work.
> > > To move the invocation form the "listener" to the "action" has not any
> > > influence.
> > > If I change the updateComponents of the add button to part1 [it
> > > includes the form] in stead of part2 [does not include the form
> > > component]  (this is not what I want) then the submission works - but
> > > without the partial updates as I wanted and I might as well use normal
> > > non-Ajaxy stuff.
> > >
> > > I'm using the tacos4-beta-3-20060710-1929. I want to use the MenuBar2
> > > stuff.
> > >
> > > Thanks in advance
> > >
> > >
> > >
> > > This is my html
> > >
> > > > >  value="ognl:new java.util.Date()"/>
> > > > > id="part1">
> > >
> > > > >   value="ognl:otherValue1"/>
> > > > >  value="ognl:new java.util.Date()"/>
> > > > >   value="ognl:otherValue2"/>
> > > > > id="part2">
> > >
> > > > >element="tr"
> > >source="ognl:mylist"
> > >index="ognl:index">
> > >
> > > > >  value="ognl:index"/>
> > >
> > >
> > >  

Re: tacos double submit (add) problem

2006-07-13 Thread Mike Oestereter

On 7/13/06, Andreas Andreou <[EMAIL PROTECTED]> wrote:

- if you change everything to update part1, it works normally...
Why do you say 'without the partial updates' ?


You're right - I mean of course "without the partial updates" of only
the recurring items.


- if you leave it as is, the problem is that the doRemoveItem listener is
somehow triggered when you click on the submit button. This results
in an item removed and the iteration failing with the error message you
described. I don't yet know why this is happening... :(


I presume you are talking about clicking the "add" button more than
once. While adding the submission of values seems to me fine. Its only
on the final "submit" button that things go wrong.

For what it is worth.. I had a similar problem also for a while after
a "submit" (I think with the normal @Form) that a component with id
"tx" was expected in stead of the "submit" (or otherway around) no
matter if I was adding or removing.

Not sure if it helps.. After a single "add" it behaves like the "add"
action is being stored and repeated during the "submit"?

Any case  -  if there is anything I can do besides testing please shout.



Mike Oestereter wrote:
> Hello
>
> My code below works for the item delete - but a normal "submit" button
> click after an "add" button click gives me an unexpected and
> additional "add".
> Also, if I do more than one "add" followed my a final "submit" the
> whole thing goes out of sync with a..
> Caused by: ognl.MethodFailedException: Method "setMyItemValue" failed
> for object [EMAIL PROTECTED]
> [java.lang.IndexOutOfBoundsException: Index: 4, Size: 4]
>
> It works fine if I take out  the Tacos/Ajax components - but then of
> course also without the nice partial screen updates.
>
> If I use a @tacos:PartialFor instead of the normal @For then the whole
> thing also goes out of sync.
> A normal @Form also does not work.
> To move the invocation form the "listener" to the "action" has not any
> influence.
> If I change the updateComponents of the add button to part1 [it
> includes the form] in stead of part2 [does not include the form
> component]  (this is not what I want) then the submission works - but
> without the partial updates as I wanted and I might as well use normal
> non-Ajaxy stuff.
>
> I'm using the tacos4-beta-3-20060710-1929. I want to use the MenuBar2
> stuff.
>
> Thanks in advance
>
>
>
> This is my html
>
>  value="ognl:new java.util.Date()"/>
> id="part1">
>
>   value="ognl:otherValue1"/>
>  value="ognl:new java.util.Date()"/>
>   value="ognl:otherValue2"/>
> id="part2">
>
>element="tr"
>source="ognl:mylist"
>index="ognl:index">
>
>  value="ognl:index"/>
>
>
>   value="ognl:myItemValue"/>
>
>
>   action="listener:doRemoveItem"
>   parameters="ognl:index"
>   value="Delete"
>   updateComponents="ognl:{'part2'}"/>
>
>
>
>
>   action="listener:doAddItem"
>   updateComponents="ognl:{'part2'}"
>   value="Add"/>
>
>   listener="listener:doSubmit1"
>   updateComponents="ognl:{'part1'}"
>   value="Submit"/>
>
>
>
> My .page
>
>
>
>
>
>
> And the .java
>
>public abstract void setOtherValue1(String value);
>public abstract String getOtherValue1();
>
>public abstract void setOtherValue2(String value);
>public abstract String getOtherValue2();
>
>public abstract List getMylist();
>public abstract void setMylist(List lis

tacos double submit (add) problem

2006-07-13 Thread Mike Oestereter

Hello

My code below works for the item delete - but a normal "submit" button
click after an "add" button click gives me an unexpected and
additional "add".
Also, if I do more than one "add" followed my a final "submit" the
whole thing goes out of sync with a..
Caused by: ognl.MethodFailedException: Method "setMyItemValue" failed
for object [EMAIL PROTECTED]
[java.lang.IndexOutOfBoundsException: Index: 4, Size: 4]

It works fine if I take out  the Tacos/Ajax components - but then of
course also without the nice partial screen updates.

If I use a @tacos:PartialFor instead of the normal @For then the whole
thing also goes out of sync.
A normal @Form also does not work.
To move the invocation form the "listener" to the "action" has not any
influence.
If I change the updateComponents of the add button to part1 [it
includes the form] in stead of part2 [does not include the form
component]  (this is not what I want) then the submission works - but
without the partial updates as I wanted and I might as well use normal
non-Ajaxy stuff.

I'm using the tacos4-beta-3-20060710-1929. I want to use the MenuBar2 stuff.

Thanks in advance



This is my html

   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   

   
   
   

My .page

   
   
   
   

And the .java

   public abstract void setOtherValue1(String value);
   public abstract String getOtherValue1();

   public abstract void setOtherValue2(String value);
   public abstract String getOtherValue2();

   public abstract List getMylist();
   public abstract void setMylist(List list);

   public abstract int getIndex();

   public void pageBeginRender(PageEvent pageEvent) {
   if (getMylist() == null) {
   ArrayList list = new ArrayList();
   list.add("one");
   list.add("two");
   list.add("three");
   setMylist(list);
   }
   }

   public void doSubmit1(IRequestCycle cycle) {
   }

   public void doRemoveItem(IRequestCycle cycle, int idx) {
   getMylist().remove(idx);
   }

   public void doAddItem(IRequestCycle cycle) {
   getMylist().add(new String("new stringy"));
   }

   public String getMyItemValue() {
   return (String) getMylist().get(getIndex());
   }

   public void setMyItemValue(String value) {
   getMylist().set(getIndex(),value);
   }

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]