Persisting credentials to be used with HTTP Digest authentication

2014-04-12 Thread Fabian Mandelbaum
Hello, I'm trying to switch from HTTP Basic (through an HTTPS channel) to HTTP Digest (keeping the HTTPS channel) authentication. I'm currently testing without HTTPS, and I was wondering how should my 'backend' store the user credentials. Currently I'm using an MD5 h

Re: Authenticator for multiple authentication schemes

2014-01-05 Thread Tim Peierls
ration. If the first >>>> one fails, the second one sees ClientInfo.isAuthenticated() == false and >>>> does *not* bypass its operation. >>>> >>>> But before you try that, consider using >>>> CookieAuthenticator<http://restlet.org/lea

Re: Authenticator for multiple authentication schemes

2014-01-03 Thread Fabian Mandelbaum
CookieAuthenticator<http://restlet.org/learn/javadocs/2.2/jee/ext/org/restlet/ext/crypto/CookieAuthenticator.html>-- >>> much of the implementation is parameterized and/or overridable. >>> >>> >>> On Thu, Jan 2, 2014 at 7:29 AM, Fabian Mandelbaum >> &g

Re: Authenticator for multiple authentication schemes

2014-01-03 Thread Fabian Mandelbaum
ation is parameterized and/or overridable. >> >> >> On Thu, Jan 2, 2014 at 7:29 AM, Fabian Mandelbaum >> wrote: >> >>> Hello there, >>> >>> our Restlet-based application needs to have users authenticated using >>> both cookies

Re: Authenticator for multiple authentication schemes

2014-01-02 Thread Tim Peierls
wrote: > >> Hello there, >> >> our Restlet-based application needs to have users authenticated using >> both cookies and http basic (hopefully to be switched to digest soon) >> authentication (Actually it's either cookies or http auth, but see below >>

Re: Authenticator for multiple authentication schemes

2014-01-02 Thread Tim Peierls
and/or overridable. On Thu, Jan 2, 2014 at 7:29 AM, Fabian Mandelbaum wrote: > Hello there, > > our Restlet-based application needs to have users authenticated using both > cookies and http basic (hopefully to be switched to digest soon) > authentication (Actually it's either coo

Authenticator for multiple authentication schemes

2014-01-02 Thread Fabian Mandelbaum
Hello there, our Restlet-based application needs to have users authenticated using both cookies and http basic (hopefully to be switched to digest soon) authentication (Actually it's either cookies or http auth, but see below for auth flow). We also use our own verifier storing credentials o

Re: OAuth 2 Password Authentication

2013-03-19 Thread Jerome Louvel
Hi Umoh, We have a doc gap on this front that we intend to fill for RF 2.2 release. Meanwhile, I suggest that you look at the GitHub related tickets for info on the latest activity on the OAuth extension: https://github.com/restlet/restlet-framework-java/issues/search?q=oauth Thanks, Jerome 20

OAuth 2 Password Authentication

2013-03-18 Thread Umoh Bassey-Duke
Hi, I'm new to Restlet and i'm trying to figure out how to setup OAuth 2. So far I haven't been able to find any documentation to assist me. Can anyone point me to any relevant documentation, or pointers on how I can do this in Restlet. thanks -

Authentication

2012-08-29 Thread Daniele Dellafiore
Hi. I'm have some concerns while designing the authentication part of my API build with Restlet 2.1. I'd like your opinion on what I've already done and I'm here to ask some advice for some more stuff. My needs are: 1. I want to identify applications users by cookie, to

Re: Save authentication data in Android between acivities

2012-05-07 Thread Thierry Boileau
Hello Sultan, unfortunately, each request must provide authentication/authorization data as stated by the stateless constraint: communication must be stateless in nature, as in the client-stateless-server (CSS) style of Section 3.4.3<http://www.ics.uci.edu/%7Efielding/pubs/dissertat

Save authentication data in Android between acivities

2012-05-03 Thread Sultan Kosaev
to authenticate every time when move between activities I use DigestAuthenticator. -- View this message in context: http://restlet-discuss.1400322.n2.nabble.com/Save-authentication-data-in-Android-between-acivities-tp7523306.html Sent from the Restlet Discuss mailing list archiv

RE: HTTPS mutual authentication fails on Android

2012-01-30 Thread Martin Svensson
At least it used to be the case that you could only use the Apache Client connector for https on Android. So for the 2.0.X version I would try that one first. cheers, m -- http://restlet.tigris.org/ds/viewMessage.do?dsForumId=4447&dsMessageId=

How to use cookie authentication in 2.1?

2012-01-17 Thread Eric Jain
I'm trying to figure out how to set up cookie authentication, but couldn't find any information (other than hints that this is supported by Restlet 2.1RC1). Nothing in Restlet in Action, either. http://restlet.tigris.org/issues/show_bug.cgi?id=605 http://wiki.restlet.org/developers/1

restlet client form based authentication

2011-12-08 Thread Judy Fu
Hello,  I am writing a restlet client to get data from a web service which  uses form based authentication with self-signed certificate.  Basic authentication is easy but I did a lot of web searches (including this list archive) and could not find info on how restlet client does form based

Re: HTTP Authentication

2011-12-07 Thread Thierry Boileau
Exception { Server server = new Server(Protocol.HTTP, 8182); // Guard the restlet with BASIC authentication. ChallengeAuthenticator guard = new ChallengeAuthenticator(null, ChallengeScheme.HTTP_BASIC, "testRealm"); // Instantiates a Verifier of identifier/secret couples based o

HTTP Authentication

2011-12-03 Thread Andrew MacDonald
Hello, This is a rather simple question about authentication from the server-side point of view. It's been awhile since I've used Restlet, so it may be something that would have been obvious before. I've been reading through some info about it at http://wiki.restlet.org/docs_2.

Re: Client Authentication SSL using Jetty

2011-11-30 Thread Sean
The reason System.setproperty worked is because I believe that this is used as the default if the parameters are not set. just my 2 cents, I may be wrong :) -- Sean -- View this message in context: http://restlet-discuss.1400322.n2.nabble.com/Client-Authentication-SSL-using-Jetty-tp7031323p7046562.html Sen

Re: Client Authentication SSL using Jetty

2011-11-30 Thread Bruno Harbulot
On 28/11/2011 12:16, David C wrote: > Hi > > As it turned out. The problem was that setting the trust information lies > outside the restlet framework. Adding these two lines solved the user > authenticaiton problem using SSL for me. > > System.setProperty("javax.net.ssl.trustStore", key

RE: Client Authentication SSL using Jetty

2011-11-28 Thread David C
Hi As it turned out. The problem was that setting the trust information lies outside the restlet framework. Adding these two lines solved the user authenticaiton problem using SSL for me. System.setProperty("javax.net.ssl.trustStore", keystorepath); System.setProperty("javax.ne

RE: Client Authentication SSL using Jetty

2011-11-25 Thread Jim Winfield
path); parameters.add("trustPassword", keystorepassword); parameters.add("need​ClientAuthentication​",needclientauthenti​cation); //Turn this on for client authentication Hope to help. Jim > Hi > > I've been stuck on setting up using Client Authenticatio

Client Authentication SSL using Jetty

2011-11-25 Thread David C
Hi I've been stuck on setting up using Client Authentication using SSL with Jetty Server. I've setup my server based on these codes component = new Component(); Server server = component.getServers().add(Protocol.HTTPS, 8112); Series

RE: Using DIGEST authentication with multiple routes

2011-10-05 Thread Jerome Louvel
authentication with multiple routes Hello Steve, I send you an idea of what could be a solution for your problem. It is based on a filter, placed just after the ClientResource that will handle the unauthorized response and complete the round trip. ** ClientResource cr = new ClientResource

Revoke HTTP Basic Authentication

2011-09-01 Thread Markus Hillenbrand
Hi In my scenario I am using a ChallengeAuthenticator with a special Verifier that checks username and password of a HTTP Basic Authentication with an external Java application: final ChallengeAuthenticator guard = new ChallengeAuthenticator(null,ChallengeScheme.HTTP_BASIC,REALM

Re: Using DIGEST authentication with multiple routes

2011-08-11 Thread Thierry Boileau
); >router.attach(Test2Resource.URI, Test2ResourceImpl.class); > >return router; >} >}; > > With a single DIGEST authentication round trip on the client. At the moment > I need to do this: > >ClientResource au

RE: Client authentication with annotated methods

2011-08-11 Thread Thierry Boileau
Hello setenv, that's the right way. I've updated the javadocs in order to precise the crucial role of the "wrap" method. Best regards, Thierry Boileau -- http://restlet.tigris.org/ds/viewMessage.do?dsForumId=4447&dsMessageId=2815681

RE: Client authentication with annotated methods

2011-08-04 Thread setenv
ource = ClientResource.create("http://"+host+":"+port+"/de​vice/technology/"+te​chnology, DevTechnologyResource.class); output.append(testTe​chnologyResource.get​XML().getText()); rewritten to handle basic http authentication becomes: ClientResource testclientTechnologyRe

Using DIGEST authentication with multiple routes

2011-08-01 Thread Steve Ferris
IGEST authentication round trip on the client. At the moment I need to do this: ClientResource authResource = new ClientResource("http://localhost:8182/foo"; + TestResource.URI); TestResource myTest = authResource.wrap(TestResource.class); authResource.setCh

Client authentication with annotated methods

2011-07-26 Thread setenv
Dear list, I built a REST interface for a domotics framework with restlet 2.0.7. I need to pragmatically test every method with authentication and i am experiencing a problem with annotated resource methods. In the test class, when I use ClientResource this way: ClientResource

Re: Authentication when unit testing

2011-07-14 Thread Thierry Boileau
Hello Nathan, I will present some code about an Application that hosts a set of resources, but this will apply also for a Component. Assuming there is an Application that declares a route called "/test1" to resource: @Override public Restlet createInboundRoot() { Router router = ne

Authentication when unit testing

2011-07-14 Thread nathan maves
We have a set up where the container manages the security. The resources that are protected by the container use the user's principal that is stored in the ClientInfo. My problem is that I don't know how to mock/set this in the client info for unit testing of our restlet resources. Can this be d

Re: How-to for setting up Client PKI Cert based authentication?

2011-07-12 Thread Matt Kennedy
sed authentication... > > > http://wiki.restlet.org/docs_2.0/13-restlet/27-restlet/46-restlet/112-restlet.html > > I am looking for a guide to setting up Client PKI Cert-based authentication > in Restlet 2.0 > > Can anyone poin

How-to for setting up Client PKI Cert based authentication?

2011-07-12 Thread Kevin Pauli
This page talks about setting up Basic and Digest based authentication... http://wiki.restlet.org/docs_2.0/13-restlet/27-restlet/46-restlet/112-restlet.html I am looking for a guide to setting up Client PKI Cert-based authentication in Restlet 2.0 Can anyone point me in the right direction

Authentication Problem in Restlet Application

2011-05-26 Thread VanessaScR
Hi, we implemented a Restlet Application to access to some files using HTTPS with the Basic Authentication. The application worked perfectly: when the user clicks on the link to the file, username and password were requested and the file download began and it still works properly if we try to

RE: Re: Odata Ntlm authentication from unix/java

2011-03-09 Thread Ravi Choppalli
Name(), -1), new NTCredentials("rchoppal", "", target.getHostName(), "na.convergys.com")); After this, I tried using kerberos keytab based implementation with correct login.conf & krb5.conf fil

RE: Re: Odata Ntlm authentication from unix/java

2011-03-08 Thread Ravi Choppalli
/364-restlet.html > > Best regards, > Thierry Boileau > > Hi, > > Really appreciate any help/direction. Thank you! > > > > I'm trying to use the NTLM authentication to make a call to the Odata > > webservice. It works fine on local because my loca

Re: Odata Ntlm authentication from unix/java

2011-03-07 Thread Thierry Boileau
Hello Ravi, I've you had a look here? http://wiki.restlet.org/docs_2.0/13-restlet/364-restlet.html Best regards, Thierry Boileau Hi, > Really appreciate any help/direction. Thank you! > > I'm trying to use the NTLM authentication to make a call to the Odata > webserv

Odata Ntlm authentication from unix/java

2011-03-03 Thread Ravi Kiran Choppalli
Hi, Really appreciate any help/direction. Thank you! I'm trying to use the NTLM authentication to make a call to the Odata webservice. It works fine on local because my local windows credentials are probably used, and my userid is authenticated with the Dynamics CRM server as I've

RE: Digest authentication example

2010-09-20 Thread Juan Carlos Gonzalez
Hi I think the problem was due to an old example when trying to build ChallengeResponse object. I've followed the example in: http://wiki.restlet.org/docs_2.0/13-restlet/27-restlet/46-restlet/112-restlet.html and is working fine now. KR, --

Digest authentication example

2010-09-17 Thread Juan Carlos Gonzalez
Hi, I'm trying to implement a simple example with Digest authentication. I've rewieved the tutorial and nearly translated it to my example. The problem is that when getting the Unauthorized response (after the first request for the secured resource), the ChallengeRequest objec

Re: Re: Optional authentication and ClientInfo.getAuthenticated()

2010-09-01 Thread Thierry Boileau
// Not authenticated > . >} > > This is correct? > Best regards. > Esteban > -- > View this message in context: > http://restlet-discuss.1400322.n2.nabble.com/Optional-authentication-and-ClientInfo-getAuthenticated-tp5381324p5469730.html &g

RE: GAE + restlet 2 + custom authentication = possible?

2010-08-28 Thread Jerome Louvel
rg Noelios Technologies ~ http://www.noelios.com -Message d'origine- De : webp...@tigris.org [mailto:webp...@tigris.org] Envoyé : dimanche 27 juin 2010 14:21 À : discuss@restlet.tigris.org Objet : GAE + restlet 2 + custom authentication = possible? Hi, Would it be possible to d

RE: Re: Optional authentication and ClientInfo.getAuthenticated()

2010-08-27 Thread Esteban F.
context: http://restlet-discuss.1400322.n2.nabble.com/Optional-authentication-and-ClientInfo-getAuthenticated-tp5381324p5469730.html Sent from the Restlet Discuss mailing list archive at Nabble.com. -- http://restlet.tigris.org/ds/viewMessage.do

RE: Re: Optional authentication and ClientInfo.getAuthenticated()

2010-08-27 Thread Thierry Boileau
Hello Bruno, Esteban, thanks for your report, I agree too, and have updated the svn repository. Bets regards, Thierry Boileau -- http://restlet.tigris.org/ds/viewMessage.do?dsForumId=4447&dsMessageId=2652060

Re: Optional authentication and ClientInfo.getAuthenticated()

2010-08-27 Thread mendie
Hi all, I agree with Bruno. If I use the optional parameter in true, how determine whether a client is authenticated or not in a resource? This line with optional parameter is always true, even if the request has no authentication. request.getClientInfo().isAuthenticated() best regards

Optional authentication and ClientInfo.getAuthenticated()

2010-08-06 Thread Bruno Harbulot
Hi all, Perhaps something that I should have noticed earlier... Currently, an optional authenticator sets the ClientInfo to be authenticated whether or not the authentication was successful or took place. This is due to beforeHandle and authenticated: @Override protected int

authentication error with jetty on browser

2010-07-28 Thread webpost
Hello bruno and thierry, I've tried using your exemple and the current svn code and it works fine! Thanks a lot. Best Regards Laurent Garrigues -- http://restlet.tigris.org/ds/viewMessage.do?dsForumId=4447&dsMessageId=2638258

RE: Re: Re: Re: authentication error with jetty on browser

2010-07-28 Thread webpost
Hello bruno and thierry, I've tried using your exemple and the current svn code and it works fine! Thanks a lot. Best Regards Laurent Garrigues -- http://restlet.tigris.org/ds/viewMessage.do?dsForumId=4447&dsMessageId=2638261

RE: Re: Re: authentication error with jetty on browser

2010-07-15 Thread Laurent Garrigues
hello Thierry, Thanks for your response. I've browsed your exemple, but I can't seem to find any reference to https. " public static void main(String[] args) throws Exception { Component c = new Component(); c.getServers().add(Protocol.HTTP, 8182); c.getDefaultHost().a

RE: Re: authentication error with jetty on browser

2010-07-09 Thread Laurent Garrigues
Hello bruno, I've been following your advice, now the "port already in use" error no longer appears, I've also deleted the line adding the SSLContextFactory but I still can't reach the ressource with the browser (authentication error). Here is the output when I s

RE: Re: Basic authentication via URL arguments

2010-07-03 Thread Jerome Louvel
Hi there, This might be something to consider for the TunnelService, to simulate a HTTP Basic authentication with additional URI information. Are you sure your HTTP client can't do proper HTTP Basic authentication? Best regards, Jerome Louvel -- Restlet ~ Founder and Technical Lead ~

Re: authentication error with jetty on browser

2010-06-28 Thread Bruno Harbulot
On 28/06/10 14:36, Laurent Garrigues wrote: > Hi Bruno, thanks for your answer > > I have no idea if it's a basic/digest authentication or a SSL/certificate. > When I use the browser, it does not open the login pop-up. > > If I remove "jettyServer.start();" it wo

RE: authentication error with jetty on browser

2010-06-28 Thread Laurent Garrigues
Hi Bruno, thanks for your answer I have no idea if it's a basic/digest authentication or a SSL/certificate. When I use the browser, it does not open the login pop-up. If I remove "jettyServer.start();" it works fine, but not in jetty: "2

GAE + restlet 2 + custom authentication = possible?

2010-06-27 Thread webpost
Hi, Would it be possible to do the following? https://docs.google.com/drawings/edit?id=1uB0hO9XN3ju7Z_qWYSDVcm6yVIAfD-OIb_ZrpzhK2Lk&hl=en Would Spring Security or JAAS be involved? Are there any code samples or tips on doing this, besides http://wiki.restlet.org/docs_2.0/13-restlet/27-restlet/

Re: Custom WWW-Authentication

2010-06-24 Thread Bruno Harbulot
On 23/06/2010 17:42, webp...@tigris.org wrote: > Thanks the reply. > > My plan is first step client calls server by http GET, second step > server response in 401 with WWW-Authentication: PPPK realm="***", > nonce="***", opaque="***", keyid="***&q

RE: Custom WWW-Authentication

2010-06-23 Thread webpost
Thanks the reply. My plan is first step client calls server by http GET, second step server response in 401 with WWW-Authentication: PPPK realm="***", nonce="***", opaque="***", keyid="***", version="***". In the end, client will response

RE: HTTP_DIGEST Authentication

2010-06-20 Thread Thierry Boileau
Hello, here is the url of the user guide regarding BASIC and DIGEST authentication: http://wiki.restlet.org/docs_1.1/13-restlet/112-restlet.html You will find a sample code and some explanations. Regarding your needs, this implementation does not handle the opaque parameter, and generates a

HTTP_DIGEST Authentication

2010-06-20 Thread webpost
Hi, I want to implement a HTTP_DIGEST Authentication in server side. The header would be like: WWW-Authentication: Digest realm="myrealm", nonce="***", opaque="***" I presume that I can put the realm in header by calling new ChallengeRequest( ChallengeScheme.H

RE: Custom WWW-Authentication

2010-06-19 Thread Thierry Boileau
Hello, you need to develop another piece of code: a subclass of AuthenticationHelper. I've just added a document in the user guid, at this URL: http://wiki.restlet.org/docs_2.0/13-restlet/366-restlet.html Best regards, Thierry Boileau -- http:

RE: Re: Basic authentication via URL arguments

2010-06-19 Thread Thierry Boileau
Hello, you can try to get the userinfo of the resource's reference, see Reference#getUserInfo, but I'm not very confident. Are you sure this data is transmitted in the HTTP request? best regards, THierry Boileau -- http://restlet.tigris.org/d

Custom WWW-Authentication

2010-06-19 Thread webpost
Hello, Can I ask a newbie question: How to custom WWW-Authentication? for example, I hope the server response header could consist of: WWW-Authentication: PPPK realm=”u...@my.com” I did the following code, but WWW-Authentication didn't display u...@my.com, just a question

RE: Re: Basic authentication via URL arguments

2010-06-19 Thread webpost
Thanks for your response. I don't have much of a choice, the particular client that needs to access the resource authenticates in this way. It is not a web browser though, it is another web service so no links will be shared. I also understand that this part of the url is encrypted via SSL co

Re: authentication error with jetty on browser

2010-06-18 Thread Bruno Harbulot
Hi Laurent, On 16/06/10 16:49, Laurent Garrigues wrote: > Hello, > > I have an autentification error when I try to reach the URI on my browser > (Firefox). What kind of authentication error do you get, SSL/certificate or basic/digest authentication? If it's just basic/digest a

Re: Basic authentication via URL arguments

2010-06-18 Thread Bruno Harbulot
is often considered bad practice, because there's a risk of sending the username and password when you share the link.) If you use the username and password in the browser, it's normally the browser that handles it and uses it for basic authentication. This information is still

authentication error with jetty on browser

2010-06-17 Thread Laurent Garrigues
Hello, I have an autentification error when I try to reach the URI on my browser (Firefox). When I try to reach this URI from a java client, it works perfectly. I use Jetty for solving the CPU problem on my server. I don't understand why it works if I use the java client and not if I use the bro

Basic authentication via URL arguments

2010-06-17 Thread webpost
I've been using the "ChallengeResponse" mechanism to authenticate users so far. ChallengeResponse challengeResponse = getRequest().getChallengeResponse(); if( challengeResponse == null ){ throw new RuntimeException("not authenticated"); } String login = challengeResponse.getIdentifier(); Stri

RE: Cookie authentication

2010-05-20 Thread gonzajg
ng forward for Restlet 2.0 and the Restlet in Action book. Thanks for all of your work! -- View this message in context: http://restlet-discuss.1400322.n2.nabble.com/Cookie-authentication-tp4963859p5079367.html Sent from the Restlet Discuss mailing list archive at

RE: Cookie authentication

2010-05-20 Thread Jerome Louvel
Hi there, Are you able to use Restlet 2.0 instead? There is a new security package that will make it easier for you to do such things. See a related issue for cookie authentication: "Support cookie based authentication" http://restlet.tigris.org/issues/show_bug.cgi?id=605 Best regar

Re: How to use Redirector with authentication?

2010-05-11 Thread Stefan Ukena
d the ChallengeResponse to the request parameter. I guess this will break with anything but basic authentication, but it works for me at the moment. Best regards, Stefan On Sat, May 8, 2010 at 8:18 PM, Thierry Boileau wrote: > I think you can override the Application#createOutboundRoot method in ord

RE: How to use Redirector with authentication?

2010-05-08 Thread Thierry Boileau
Hello Stefan, I think you can override the Application#createOutboundRoot method in order to provide for example your own Filter that updates the Request (according to the request's URI) with the right ChallengeResponse, and sets its "next" property with the context client dispatcher: getCont

How to use Redirector with authentication?

2010-05-03 Thread Stefan Ukena
Hi everyone, I am using the Redirector-class to proxy client requests (let's call it "client A") from server A to server B (i.e. MODE_SERVER_OUTBOUND): client A <=> server A <=> server B Now I want to guard access to the resources of server B with (digest) aut

Cookie authentication

2010-04-26 Thread gonzajg
Hi, i have a problem setting the challengescheme in the guard. I've created a guard that decides authentication based on the cookie sent. But when i use the following line: MyGuard mGuard = new MyGuard (getContext(),ChallengeScheme.CUSTOM, "Tradefields API Login"); In runtime i

RE: Comprehensive example of authentication in RESTLet 2.0?

2010-02-23 Thread Jerome Louvel
g Objet : Re: Comprehensive example of authentication in RESTLet 2.0? Hello, Thanks Garry for your mail. Just a few words about the security model in the Restlet framework. The Restlet framework has set up its own model (see here [0], [1]) based on some properties of the ClientInfo class: user and roles

Re: Authentication negociation

2010-02-02 Thread Jerome Louvel
automatic negotiation: "Support preemptive authentication" http://restlet.tigris.org/issues/show_bug.cgi?id=288 Best regards, Jerome 2010/2/2 JY Cronier > Hi all, > > Is it possible to implement a kind of "authentication negotiation". > This means that the ser

Authentication negociation

2010-02-02 Thread JY Cronier
Hi all, Is it possible to implement a kind of "authentication negotiation". This means that the server might return to the client a list of possible authentication methods (multiple values for the WWW-Authenticate headers?) with HTTP code 401 The HTTP client choose the best method t

Re: Comprehensive example of authentication in RESTLet 2.0?

2010-01-28 Thread Garry Turkington
ues of the ChallengeResponse object that my AuthenticationHelper populates (see below) to make coarse authentication decisions. The next objects in my routes are then different subclasses of org.restlet.security.Authorizer that have an authorize method analogous to the authenticate method in the Aut

Comprehensive example of authentication in RESTLet 2.0?

2010-01-27 Thread Drew
Hello, I'm trying to integrate authentication into my RESTLets however I'm having trouble understanding the authentication scheme that Restlet implements. It seems that most of the examples use the "Guard" class... however this is now deprecated... It seems that Challenge

RE: Re: HTTP Basic Authentication and Spring

2010-01-12 Thread Fly
Hi, THanks for response, but I actually figured this out. The reason for not working was my appcontext.xml settings overlapping with the code above, so I had to do the wiring in one place. -- http://restlet.tigris.org/ds/viewMessage.do?dsForum

Re: HTTP Basic Authentication and Spring

2010-01-09 Thread Jerome Louvel
TTP Basic Authentication and Spring for the > Restlet 2.0 M6. > > Spring appcontext.xml configures SpringComponent with ssl settings and > defaultTarget with routers. This works fine. > > main() method: > Component component = ((Component) ctx.getBean("top")); > com

HTTP Basic Authentication and Spring

2010-01-05 Thread Fly
Hi, I am trying to integrate HTTP Basic Authentication and Spring for the Restlet 2.0 M6. Spring appcontext.xml configures SpringComponent with ssl settings and defaultTarget with routers. This works fine. main() method: Component component = ((Component) ctx.getBean("top")); compo

RE: Re: Problem in Setting Authentication

2010-01-05 Thread Murugesan
I got a reply. So i have tried with IP Address for test.com and replaced test.com with IP Address and tried. At this time i got GATEWAY_TIMEOUT error. error message: - Jan 5, 2010 4:56:32 AM com.noelios.restlet.ext.net.HttpClientHelper start INFO: Starting the HTTP client 504 Gatewa

Re: Problem in Setting Authentication

2010-01-05 Thread Thierry Boileau
c void main(String [] args) throws IOException { > String uri = > "http://test.com/cs/api/forums.ashx/forums/5/threads/3/posts/3"; ; > ClientResource resource = new ClientResource(uri); > ChallengeScheme scheme = ChallengeScheme.HTT

Problem in Setting Authentication

2010-01-05 Thread Murugesan
(String [] args) throws IOException { String uri = "http://test.com/cs/api/forums.ashx/forums/5/threads/3/posts/3"; ; ClientResource resource = new ClientResource(uri); ChallengeScheme scheme = ChallengeScheme.HTTP_BASIC; ChallengeResponse authentication = new Challen

RE: CAS authentication in Restlet server

2009-12-28 Thread Jerome Louvel
.org Objet : Re: CAS authentication in Restlet server Hi Jerome, Thanks for the pointer, it was very useful. I think I'm starting to see the picture now. I'm a bit confused about the various places where a Verifier is referenced. I've seen such references in Context, ChallengeAuthenti

RE: Re: Registering a custom authentication scheme

2009-12-23 Thread webpost
Hello Nirav and Thierry, Thanks for your feedback. I think my biggest problem is understanding the API and how it should be used. Right now, i've managed to register my authentication helper and the class is being instantiated and i can see the 'formatRawRequest' method bein

RE: Re: Registering a custom authentication scheme

2009-12-23 Thread webpost
Ok, I seem to have solved my problem... ^_^ I needed to provide a custom verifier to the Authenticator. I understand the need to decouple the verifier from the helper, but it would have been nice if the 'plugin helper' could have specified what verifier to use by default for the authenticator t

RE: Registering a custom authentication scheme

2009-12-22 Thread webpost
Hi KD, The Restlet Security schema is highly extensible and very adaptive. Kudos to the team. You can easily write your own authentication scheme. We have a 'Component' which has several 'Applications' in it. We needed custom authentication and authorization for one of thes

Re: Registering a custom authentication scheme

2009-12-22 Thread Thierry Boileau
n the server. > > Looking for i.e. > Example of a custom authentication scheme and relevant classes. How does one > register the scheme so restlet can find it at startup. > > Using the scheme in the org.restlet.Application via a call to a Guard. > > Thanks, > --KD >

Registering a custom authentication scheme

2009-12-22 Thread webpost
this? Right now i'm just looking at passing in a custom request header from the client and validating this on the server. Looking for i.e. Example of a custom authentication scheme and relevant classes. How does one register the scheme so restlet can find it at startup. Usi

Re: GWT client, authentication and ETags

2009-12-22 Thread Thierry Boileau
Hi Niclas, >Some short-circuit occurring. Possibly mixing it up with some previous version. sure, there have been updates in the last days. >Thanks a lot for your patience... Tiring day for me... you're welcome! :) Best regards, Thierry Boileau > Again, if I read a bit more careful... > > T

Re: GWT client, authentication and ETags

2009-12-22 Thread Niclas Hedhman
On Tue, Dec 22, 2009 at 3:47 PM, Thierry Boileau wrote: > Hi Niclas, > >  > * ext.json depends on Google's Json classes, and I think that > therefore the module should inherit the Google one. > Isn't that the case? Do you think about the JSON.gwt.xml file that looks > like: > >     >     > Some

Re: GWT client, authentication and ETags

2009-12-22 Thread Niclas Hedhman
Again, if I read a bit more careful... The "Request" contains the "ChallengeReponse" Got it!!! Thanks a lot for your patience... Tiring day for me... Niclas On Tue, Dec 22, 2009 at 5:33 PM, Niclas Hedhman wrote: > On Tue, Dec 22, 2009 at 3:47 PM, Thierry Boileau > wrote: >> Hi Niclas, >>

Re: GWT client, authentication and ETags

2009-12-21 Thread Thierry Boileau
Hi Niclas, > * ext.json depends on Google's Json classes, and I think that therefore the module should inherit the Google one. Isn't that the case? Do you think about the JSON.gwt.xml file that looks like: >Secondly, I presume that clientResource.getChallengeRequest() after cons

Re: GWT client, authentication and ETags

2009-12-21 Thread Niclas Hedhman
Ok, Since I use JSON, and the ext.json was missing the GWT module definition, I kind of 'forced' ;-) into SNAPSHOT after all. So, first spontaneous observation; * ext.json depends on Google's Json classes, and I think that therefor the module should inherit the Google one. Secondly, I presume

Re: GWT client, authentication and ETags

2009-12-21 Thread Niclas Hedhman
On Mon, Dec 21, 2009 at 10:48 PM, Thierry Boileau wrote: > Hello Niclas, > > the API of Restlet 2.0 has been moving, as usual, and it is now > stabilized a few points needs to be addressed). The future 2.0 RC > (Release Candidate) is planned for january 2010, which means that the > API will be def

Re: GWT client, authentication and ETags

2009-12-21 Thread Thierry Boileau
not present in the GWT Module/jar of 2.0-M5, and > elsewhere I read of the "new Client( protocol )" usage, where I can't > figure out how to tailor authentication and headers. > > First step; Which of the two is the correct one? > > Step 2; If it is "Client&quo

GWT client, authentication and ETags

2009-12-21 Thread Niclas Hedhman
Hi, I am confused over the client pattern to use. On one hand, I find documentation/mails that speaks of ClientResource, which IIUIC is not present in the GWT Module/jar of 2.0-M5, and elsewhere I read of the "new Client( protocol )" usage, where I can't figure out how to tailor

Re: riap authentication

2009-12-09 Thread Zsolt Czinkos
le to authenticate a request via the RIAP protocol? One of >> my application is guarded by BASIC authentication, and I'd like to use >> it from another restlet application. Both application are in the same >> component in servlet environment. >> &

Re: riap authentication

2009-12-09 Thread Thierry Boileau
Hi Zsolt, I send you a sample application that illustrates the scenario. Best regards, Thierry Boileau > Hello > > Is it possible to authenticate a request via the RIAP protocol? One of > my application is guarded by BASIC authentication, and I'd like to use > it

Re: CAS authentication in Restlet server

2009-12-03 Thread Arjohn Kampman
clear. >> >> If I understand you correctly, you are suggesting to use a CAS proxy >> ticket as an authentication token. However, such a token can only be >> sent once to a CAS server for verification. This very much looks >> like a >> problem for (preemptive) au

  1   2   3   4   >