Re: change session id after login

, 2010 at 2:40 PM, Mike Oestereter mike.oestere...@gmail.com wrote: The problem is that I don't want to invalidate the session from an application point of view. After successful login I want to store details about the authenticated user in the user session. I just want to kill the existing

Re: change session id after login

On Mon, Oct 18, 2010 at 1:45 PM, Thiago H. de Paula Figueiredo thiag...@gmail.com Are you sure? This doesn't make a lot of sense. As you can have more than one session state object, changing the session id would be the same as invalidating the session. This would be a serious bug. I'm pretty

Re: change session id after login

The problem is that I don't want to invalidate the session from an application point of view. After successful login I want to store details about the authenticated user in the user session. I just want to kill the existing cookie and associate a new (and different cookie) with the current

change session id after login

Hi How can I change the value of the JSESSIONID cookie after succcessfull login - failure to do this will result in a session hijacking vulnerability. I'm not using Spring or AECGI (sp?) and am not interested in it at the moment. In tapestry 5.0 the value of the cookie (somewhat magically and

HttpOnly Cookie

Hi I would like to make tapestry append '; HttpOnly' to the end of whatever value tapestry decides to write for the SET-COOKIE header when applicable. Thanks Mike - To unsubscribe, e-mail:

404 from onActivate

Hello I've got a page that takes the context as parameter to produce a result from db, e.g.: http:/hostname/app/page/123 If the db result for 123 does not exist I would like to throw a 404. Currently I'm using... Object onActivate(EventContext context) { //db lookup code to prepare page }

Re: 404 from onActivate

and redirect to it in case your onActivate doesn't find a corresponding entity. Am 19.03.2010 um 15:04 schrieb Mike Oestereter: Hello I've got a page that takes the context as parameter to produce a result from db, e.g.:  http:/hostname/app/page/123 If the db result for 123 does

PCI/Nessus scan of Tapestry application

Hello everybody We've successfully developed and deployed a payment manager application written in Tapestry 5.1 The system with application is PCI certified. This requires a periodic vulnerability scan by a PCI scanning vendor. Basically the scanning vendor use Nessus to throw all kinds of

Re: PCI/Nessus scan of Tapestry application

and get the code for org.apache.tapestry5.internal.services.URLEncoderImpl and make it work better Anyway, all the best On Tue, Mar 16, 2010 at 3:58 PM, Thiago H. de Paula Figueiredo thiag...@gmail.com wrote: On Tue, 16 Mar 2010 10:09:18 -0300, Mike Oestereter mike.oestere...@gmail.com wrote

Re: PCI/Nessus scan of Tapestry application

Thanks man On Tue, Mar 16, 2010 at 6:21 PM, Thiago H. de Paula Figueiredo thiag...@gmail.com wrote: On Tue, 16 Mar 2010 12:22:13 -0300, Mike Oestereter mike.oestere...@gmail.com wrote: I dont know how but I think 1) could be addressed by making tapestry to encode action differently to say

Tap 5 / 4.1 - Dirty Form Warning?

Hi We may have to port a Tapestry 4.0 app to either Tapestry 4.1 or (preferably) 5.0 depending on how easy it would be. The 4.0 uses the tacos:DirtyFormWarning quite a lot. And we can't find such a component in Tapestry 4.1 or 5.0. Do you know of a similar component or feature in Tapestry 4.1

T5: strange behavior with body tag and zones inside components - complete simple example

Hi In the simple example below I get the correct result after clicking on the update: two hyprlink (the correct zone is updated): update: one (hyperlink) UPDATED two BUT when I modify the page .tml and put the body inside a htmlbody.../body/html in stead of only inside a html.../htm The

zone ids in component within form

Hi I've got a Person component that gets rendered within a loop. Inside the Person.tml I've got a zone (zony) and an actionlink that should update that zone. A click on any (not the first) of the rendered ActionLinks incorrectly updates the first zone zony (and not, say, zony_1) - it appears that

Re: how to change cursor to hourglass during async event handling

the tapestry.fx.attachAjaxStatus method Mike Oestereter wrote: Hi During a async call to a @EventListener method that takes quite long (slow database connection) it would be nice to (like previously in tacos) change the cursor to an hourglass (or equivalent). It would actually be quite nice as well if input

Re: how to change cursor to hourglass during async event handling

the tapestry.fx.attachAjaxStatus method Mike Oestereter wrote: Hi During a async call to a @EventListener method that takes quite long (slow database connection) it would be nice to (like previously in tacos) change the cursor to an hourglass (or equivalent). It would actually be quite

Re: [4.1.2] EventListener and Effects

(){return dojo.lfx.highlight(some_client_id_2, [255, 255, 184]) }); /script some_client_id_1 is the id of the updated component. When the component is updated, the effect is triggered. some_client_id_2 is the id of the component to attach the effect to. Igor On 8/30/07, Mike Oestereter

how to change cursor to hourglass during async event handling

Hi During a async call to a @EventListener method that takes quite long (slow database connection) it would be nice to (like previously in tacos) change the cursor to an hourglass (or equivalent). It would actually be quite nice as well if input to controls could be disabled (at least for a

[4.1.2] EventListener and Effects

Hi I'm upgrading an app from 4.0 to 4.1.2. In the 4.0 app I have a PropertySelection that has eventListener pointing to a @tacos:EventSubmit that has a effects=template:{highlight:{any:'[255,255,184], 500, 500'}} How do I get the effect thing to work in 4.1.2? My onchnage EventListener

handle on component's enclosed components

Hi Say I've got the following on a template page where Main and Sub are components.. span jwcid=[EMAIL PROTECTED] . . . phtml/p !-- maybe even a @For here?? -- span jwcid=[EMAIL PROTECTED] . . ./ span jwcid=[EMAIL PROTECTED] . . ./ pmore html/p /span Is there a way to get in

Re: handle on component's enclosed components

example). On 11/17/06, Karthik N [EMAIL PROTECTED] wrote: Look at the API docs http://tapestry.apache.org/tapestry4/tapestry/apidocs/index.html AbstractPage has getNestedComponent AbstractPage extends AbstractComponent that has getComponents() HTH On 11/17/06, Mike Oestereter [EMAIL

tapestry 4.* status

Hi there I see the tapestry website reports that 4.1 is no longer unstable but active. Also that the stable 4.0.2 link disappeared although it is still downloadable. Is 4.1 actively becoming stable or what is the status? Cheers Mike

AjaxLinkSubmit clicked twice directs to webserver root

Hi I find that if I click on an AjaxLinkSubmit link twice - the second time before the 1st click's result could be rendered - the browser gets directed to the webserver root. In other words if I am on http://localhost:8080/myapp/balhabla and I click twice I get directed to

Re: AjaxLinkSubmit clicked twice directs to webserver root

there is a delete link and finally an add link. After clicking the add' (and waiting for a while) and then clicking another add or a delete the app directs to the webserver root. Funny thing is that it used to work fine with tacos beta2. On 8/27/06, Mike Oestereter [EMAIL PROTECTED] wrote: Hi I

DirtyFormWarning and tacos:AjaxForm

Hi The DirtyFormWarning and tacos:AjaxForm does not seem to work to nicely together. Also, not with refresh events. I know everything is in flux at the moment with Tap4.1 and seeing how/where the tacos components will fit in. But in the meantime.. are there any (current) plans to make the

Re: Dialog size and position

The demo app on the opencomponentry website initialy shows the dialog popup centered in the browser window. But after a wrong password or any subsequent renderings it is also displayed with the top left corner centered in the browser window. I'm using mozilla on a mac. On 7/31/06, Mike

stylesheet and asset

Hi How do I define the style for an element to use an asset in stead of the direct image, either as an inline style definition or alternatively as a stylesheet ? span jwcid=@Any style=background-image:url(img/button-center.gif); Blah/span Thanks

Re: stylesheet and asset

. A typical app might have a top level directory structure of: css/ images/ js/ WEB-INF/ If you have a stylesheet file with something like: .info { background: url(images/button-center.gif) no-repeat top right; } Then you can do: span jwcid=@Any class=info / On 7/28/06, Mike Oestereter [EMAIL

Re: stylesheet and asset

sorry - not the final url but the final style string. On 7/28/06, Mike Oestereter [EMAIL PROTECTED] wrote: Thanks for your reply. I think with your suggestion a component/page in a subdirectory under mywebapp conect path will render correctly because the images is relative to the css dir

Re: tacos double submit (add) problem

Additional information: not authorized to add child Error code: 1186a82a6e49347a24c06ca75d49097b58e1d1b0 Any other place to log this? On 7/14/06, Mike Oestereter [EMAIL PROTECTED] wrote: Will log the bug and use part1 And thanks alot. On 7/13/06, [EMAIL PROTECTED] [EMAIL PROTECTED] wrote: Yep, i

Re: tacos double submit (add) problem

. Mike Oestereter wrote: Hello My code below works for the item delete - but a normal submit button click after an add button click gives me an unexpected and additional add. Also, if I do more than one add followed my a final submit the whole thing goes out of sync