Re: tynamo tapestry-security help

2010-11-17 Thread Kalle Korhonen
Thanks Everton! With a high certainty, that's the root cause. Perhaps I'll just document this for now, wonder if T5.1.0.8 release will see the light of the day at some point. Kalle On Wed, Nov 17, 2010 at 8:32 AM, Everton Agner wrote: > You might be facing the TAP5-1018 Bug i've reported... > h

Re: tynamo tapestry-security help

2010-11-17 Thread Everton Agner
Btw, as a Workaround, you can make a ComponentRequestFilter that redirects to the Start page when the url root path ("/yourapp/") is requested. That would make it work. ___ Everton Agner Ramos 2010/11/17 Everton Agner > You might be facing the TAP5-1018 Bug i've reported...

Re: tynamo tapestry-security help

2010-11-17 Thread Everton Agner
You might be facing the TAP5-1018 Bug i've reported... https://issues.apache.org/jira/browse/TAP5-1018 ___ Everton Agner Ramos 2010/11/17 Kalle Korhonen > Wonder if Start is handled differently than Index - if you can, please > check and open (Tynamo) issue accordingly. > >

Re: tynamo tapestry-security help

2010-11-17 Thread Kalle Korhonen
Wonder if Start is handled differently than Index - if you can, please check and open (Tynamo) issue accordingly. Kalle On Wed, Nov 17, 2010 at 1:44 AM, Paul Stanton wrote: > Hi Kalle, > > I've just tried t-s 0.2.1 and the > org.apache.shiro.authz.annotation.RequiresAuthentication annotation. >

Re: tynamo tapestry-security help

2010-11-17 Thread Paul Stanton
Hi Kalle, I've just tried t-s 0.2.1 and the org.apache.shiro.authz.annotation.RequiresAuthentication annotation. package zzz.pages; @RequiresAuthentication public class Start {} The same problem occurs. http://host/app/start - correctly directs to the login page http://host/app/ - incorrectl

Re: tynamo tapestry-security help

2010-11-15 Thread Kalle Korhonen
Move to tapestry-security 0.2.1 and use the Shiro @RequiresAuthentication annotation instead. The *All annotations were removed since I implemented them in Shiro directly (one of the benefits of being a committer in both). We do have a couple of tests for the case and those are passing. There's a p

Re: tynamo tapestry-security help

2010-11-13 Thread Paul Stanton
Also, I've marked my 'Start' page as @RequiresAuthenticationAll, and it correctly forwards to the login page when not already authenticated if the url is http://host/app/start however it displays the page's content if the url is http://host/app/ This appears to be a bug IMO, is there a way

Re: tynamo tapestry-security help

2010-11-12 Thread Paul Stanton
Kalle, Leaving that one behind... Where can I find the documentation regarding the various tapestry components and pages provided by tapestry-security? The Javadoc only contains explainations for 5/11 of the components: http://tynamo.org/constant/tapestry-security/apidocs/index.html Also, i

Re: tynamo tapestry-security help

2010-11-11 Thread Kalle Korhonen
On Thu, Nov 11, 2010 at 2:25 PM, Paul Stanton wrote: > Interesting. You can see the need for the behaviour but not the need to > expose/implement it cleanly via the API. No, that's the wrong conclusion. Subscribe to the shiro dev list, we recently had extensive discussion on this but in the meant

Re: tynamo tapestry-security help

2010-11-11 Thread Paul Stanton
Hi Kalle, Interesting. You can see the need for the behaviour but not the need to expose/implement it cleanly via the API. For mine, I don't see why 'HashedCredentialsMatcher.hashProvidedCredentials' and 'getCredentials' are protected, this makes it impossible to expose the hashing functio

Re: tynamo tapestry-security help

2010-11-11 Thread Kalle Korhonen
Hmm.. if you use username as the salt, you already have stored the salt. For my own custom and application-specifc CredentialsMatcher implementations, I'm not too purist about these things: sometimes I've done it by just adding a static encode operation as part of the CredentialsMatcher, e.g.:

Re: tynamo tapestry-security help

2010-11-11 Thread Paul Stanton
Kalle, I think you misunderstood my question. I don't have a problem with using the username as the salt, the salt has to be stored parallel to the user entity somewhere anyway. I would like to know how to get access to the CredentialsMatcher and have it generate the hashed password for me N

Re: tynamo tapestry-security help

2010-11-10 Thread Kalle Korhonen
On Wed, Nov 10, 2010 at 8:44 PM, Paul Stanton wrote: > Firstly, I'd like to use a salted hash to match credentials... the booking > example application does not do this and the documentation (for shiro) > doesn't quite show the complete picture. Yeah I bet you are right on that. That should just

Re: tynamo tapestry-security help

2010-11-10 Thread Paul Stanton
Hi Kalle, Thanks for the extra information, yes I was looking for that type of documentation and the example app has helped my understanding. I still have a couple of questions though... Firstly, I'd like to use a salted hash to match credentials... the booking example application does not d

Re: tynamo tapestry-security help

2010-11-10 Thread Kalle Korhonen
Ah you are looking for documentation on Shiro. Maybe I can place the links to it more prominently on tapestry-security page, but see http://shiro.apache.org/core.html (there's more but for now Subject and Realms are the most relevant to you). If you want examples, Christophe's hotel booking demo wi

Re: tynamo tapestry-security help

2010-11-09 Thread Paul Stanton
hi kalle, ok, to start with.. how would you go about integrating a userset stored in a database? how do you replace/customise the login page? how do you manually perform authentication? cheers, p. On 10/11/2010 3:17 PM, Kalle Korhonen wrote: On Tue, Nov 9, 2010 at 7:57 PM, Paul Stanton wro

Re: tynamo tapestry-security help

2010-11-09 Thread Kalle Korhonen
On Tue, Nov 9, 2010 at 7:57 PM, Paul Stanton wrote: > Anyone know of a good 'getting started' guide for tynamo tapestry-security? > this one ... > http://docs.codehaus.org/display/TYNAMO/tapestry-security+guide > ... still leaves me scratching my head. It does? Sorry about that, I honestly though

tynamo tapestry-security help

2010-11-09 Thread Paul Stanton
Anyone know of a good 'getting started' guide for tynamo tapestry-security? this one ... http://docs.codehaus.org/display/TYNAMO/tapestry-security+guide ... still leaves me scratching my head. thanks, p. - To unsubscribe, e-mai