[jira] Created: (SLING-1117) Update to latest plugin versions and dependencies

2009-09-18 Thread Carsten Ziegeler (JIRA)
Update to latest plugin versions and dependencies - Key: SLING-1117 URL: https://issues.apache.org/jira/browse/SLING-1117 Project: Sling Issue Type: Task Components: General

Re: authorization headers

2009-09-18 Thread Alexander Klimetschek
On Thu, Sep 17, 2009 at 20:47, Vidar Ramdal vi...@idium.no wrote: Are you sure about the XHR request part? That's not my experience with Safari, it won't send the Authentication header on subsequent requests if not explicitly asked for it (by the server sending WWW-Authenticate) on every

Re: authorization headers

2009-09-18 Thread Peter Chiochetti
Am 2009-09-18 12:58, schrieb Alexander Klimetschek: Currently Sling's auth handler will assume that a plain request with no credentials is a new user that is not yet logged in and will redirect him to the login page. That's why there is the special sling:authRequestLogin parameter that will

[jira] Assigned: (SLING-1115) Redirecting to an absolute url does not work

2009-09-18 Thread Carsten Ziegeler (JIRA)
[ https://issues.apache.org/jira/browse/SLING-1115?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Carsten Ziegeler reassigned SLING-1115: --- Assignee: Carsten Ziegeler Redirecting to an absolute url does not work

RE: authorization headers

2009-09-18 Thread Mike Müller
...I have created a small browser test suite (with some perl cgi to be run in a plain Apache httpd) for that back then when I was experimenting. If you are interested, I could make it publicly available That would be cool - it seems like there's much undocumented knowledge about

Re: authorization headers

2009-09-18 Thread Vidar Ramdal
On Fri, Sep 18, 2009 at 12:58 PM, Alexander Klimetschek aklim...@day.com wrote: [...] I have created a small browser test suite (with some perl cgi to be run in a plain Apache httpd) for that back then when I was experimenting. If you are interested, I could make it publicly available. Thank

[jira] Commented: (SLING-1116) FORM Based Authentication

2009-09-18 Thread Bertrand Delacretaz (JIRA)
[ https://issues.apache.org/jira/browse/SLING-1116?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=12757122#action_12757122 ] Bertrand Delacretaz commented on SLING-1116: I agree that using an HTTP session

[jira] Resolved: (SLING-789) Allow redirecting of one script's response into a String for a second script to process

2009-09-18 Thread Carsten Ziegeler (JIRA)
[ https://issues.apache.org/jira/browse/SLING-789?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Carsten Ziegeler resolved SLING-789. Resolution: Won't Fix This is a very old feature request which seems to be of low interest.

[jira] Commented: (SLING-1116) FORM Based Authentication

2009-09-18 Thread Alexander Klimetschek (JIRA)
[ https://issues.apache.org/jira/browse/SLING-1116?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=12757131#action_12757131 ] Alexander Klimetschek commented on SLING-1116: -- IIUC, using a cookie instead

Re: Applying SLING-864

2009-09-18 Thread Bertrand Delacretaz
On Fri, Sep 18, 2009 at 2:05 PM, Carsten Ziegeler cziege...@apache.org wrote: I'm currently looking through open issues for our API and I stumbled upon https://issues.apache.org/jira/browse/SLING-864. What is the general opinion? Should we include it? Is is required? +1 for applying, makes

[jira] Commented: (SLING-1116) FORM Based Authentication

2009-09-18 Thread Bertrand Delacretaz (JIRA)
[ https://issues.apache.org/jira/browse/SLING-1116?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=12757134#action_12757134 ] Bertrand Delacretaz commented on SLING-1116: OTOH using a cookie instead of the

[jira] Resolved: (SLING-261) Request to donate Bunkai Dojo resource editor to Sling

2009-09-18 Thread Carsten Ziegeler (JIRA)
[ https://issues.apache.org/jira/browse/SLING-261?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Carsten Ziegeler resolved SLING-261. Resolution: Incomplete As there are no news for a long time, I'm resolving this issue now

SLING-485: Use JSON library from json.org

2009-09-18 Thread Carsten Ziegeler
We still have the bug about using the original JSON classes open https://issues.apache.org/jira/browse/SLING-485. In the meantime, there is a new version of the lib. So the question is, should we update? And if we update, what does that mean - do we just refactor the package names or do we

Re: SLING-485: Use JSON library from json.org

2009-09-18 Thread Bertrand Delacretaz
On Fri, Sep 18, 2009 at 2:52 PM, Alexander Klimetschek aklim...@day.com wrote: ...Using the original lib is better than copying it's source In theory yes, but IIRC the original doesn't satisfy our requirement for respecting sort order of properties. Not sure about the details, I'd need to

[jira] Updated: (SLING-447) Schedule jobs n times

2009-09-18 Thread Carsten Ziegeler (JIRA)
[ https://issues.apache.org/jira/browse/SLING-447?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Carsten Ziegeler updated SLING-447: --- Affects Version/s: (was: 3) Commons Scheduler 2.0.4 Fix

Sling's default HTML rendition displays when accessing simple-demo

2009-09-18 Thread Ming Jin
Hi, I'm trying to startto use Sling from the samples in code base. I succeeded in setting up the sample espblog, but failed with the sample simple-demo. http://localhost:/content/espblog/*.html; display the Sling ESP blog sample page, with the Home/Admin/New Post/... menu. However,

Re: SLING-485: Use JSON library from json.org

2009-09-18 Thread Peter Chiochetti
Am 2009-09-18 15:06, schrieb Bertrand Delacretaz: In theory yes, but IIRC the original doesn't satisfy our requirement for respecting sort order of properties. Not sure about the details, I'd need to dig into our archives to provide more details. In theory also, the only way of passing data

[jira] Updated: (SLING-1112) ValueMap doesn't allow deep property fetching anymore

2009-09-18 Thread Carsten Ziegeler (JIRA)
[ https://issues.apache.org/jira/browse/SLING-1112?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Carsten Ziegeler updated SLING-1112: Attachment: DeepResolvingValueMap.java Workaround value map wrapper ValueMap doesn't

[jira] Commented: (SLING-1112) ValueMap doesn't allow deep property fetching anymore

2009-09-18 Thread Carsten Ziegeler (JIRA)
[ https://issues.apache.org/jira/browse/SLING-1112?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=12757175#action_12757175 ] Carsten Ziegeler commented on SLING-1112: - I've added a value map wrapper which

Re: Sling's default HTML rendition displays when accessing simple-demo

2009-09-18 Thread Ming Jin
Hi Bertrand, Thanks for your reply. The sample webloader works fine too. It's a great idea to combine jcr, rest and osgi togethter. Going to do more exploration into Sling. - Ming On Fri, Sep 18, 2009 at 2:27 PM, Bertrand Delacretaz bdelacre...@apache.org wrote: Hi Ming Jin, On Fri, Sep

Re: Applying SLING-864

2009-09-18 Thread Jonathan 'J5' Cook
+1 from me to apply On Sep 18, 2009, at 8:39 AM, Alexander Klimetschek aklim...@day.com wrote: On Fri, Sep 18, 2009 at 14:05, Carsten Ziegeler cziege...@apache.org wrote: I'm currently looking through open issues for our API and I stumbled upon

[jira] Commented: (SLING-1116) FORM Based Authentication

2009-09-18 Thread Eric Norman (JIRA)
[ https://issues.apache.org/jira/browse/SLING-1116?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=12757265#action_12757265 ] Eric Norman commented on SLING-1116: I'm not opposed to storing the credential cache in

Re: [jira] Commented: (SLING-1116) FORM Based Authentication

2009-09-18 Thread Peter Chiochetti
Am 2009-09-18 14:05, schrieb Alexander Klimetschek (JIRA): Correct, both are XSS vulnerable. Only plain basic auth is not XSS vulnerable. Please excuse me hijacking this thread. If I want to prevent XSRF, cross site request forgery, a simple recipe is also to have a shared secret between

Hudson build became unstable: sling-contrib-1.5 » Apache Sling Jcrinstall Integration Tests #230

2009-09-18 Thread Apache Hudson Server
See http://hudson.zones.apache.org/hudson/job/sling-contrib-1.5/org.apache.sling$org.apache.sling.jcr.jcrinstall.it/230/