RE: Problem configuring Acegi Spring security login page with Wicket framework

2007-07-30 Thread Laurent Brucher
Hi Lubos, As Erik said, you don't. As an example, here's the Acegi configuration I use in my project (piece of the Spring's application context XML): CONVERT_URL_TO_LOWERCASE_BEFORE_COMPARISON

Must renderHead even if setVisible(false)

2007-07-30 Thread Carlos Pita
Hi all, I have a component that contributes some javascript to the header. Initially the component won't be shown but an ajax event could make it visible. The problem is that the javascript is contributed later, during the ajax response, and there is a security concern with firefox: "permission den

Re: Problem configuring Acegi Spring security login page with Wicket framework

2007-07-30 Thread Erik van Oosten
Hi Lubos, But how do I set the appropriate acegi configutration to specify the login and login error page in As I wrote in the previous mail: You don't. Regards, Erik. lubosp wrote: Erik, thanks for the answer. But how do I set the appropriate acegi configutration to specify the login an

Re: Testing for cookie capability

2007-07-30 Thread David Leangen
> Looking at the logic, even if I set my own cookies and/or piggyback on > the jsessionid value, there is still the case of the first visit (since > no values are set, so I don't know if it's just the first visit, or a > client with no cookie capability). Ok... that's just not true. Looks like w

Re: Testing for cookie capability

2007-07-30 Thread David Leangen
Excellent! Thanks again. Looking at the logic, even if I set my own cookies and/or piggyback on the jsessionid value, there is still the case of the first visit (since no values are set, so I don't know if it's just the first visit, or a client with no cookie capability). Either I need to always

Re: Testing for cookie capability

2007-07-30 Thread Igor Vaynberg
you need to set it up yourself. request A setcookie C append &cookie=C to url request B if (!cookie C set) always append to url you can setup an automatic redirect as the first page your users hit that does this check and sets a session value. so instead of /=homepage you get /=A->B->homepage

Re: Testing for cookie capability

2007-07-30 Thread David Leangen
Wow! Thanks for the lightening fast reply! > no way to test it except try it - which is what the servlet container does Do you mean that I can query the servlet container somehow? Or I need to set up this mechanism myself? I poked around, but didn't see anything pop out at me that indicates i

Re: Testing for cookie capability

2007-07-30 Thread Igor Vaynberg
no way to test it except try it - which is what the servlet container does first url it adds a cookie, then on next request if its not there it means cookies are disabled -igor On 7/30/07, David Leangen <[EMAIL PROTECTED]> wrote: > > > What would be the usual way of testing a client for cookie

Testing for cookie capability

2007-07-30 Thread David Leangen
What would be the usual way of testing a client for cookie capability? Essentially, I want to know if I can rely on the use of a cookie, or if I should fall back on coding something into the URL parameters. Thanks! David -

Getting a 1.2.7 shapshot posted to the repo on wicket-stuff

2007-07-30 Thread David Leangen
Would it be possible to have the current 1.2.7 snapshot posted on the repository on the wicket-stuff site? Is there anything I can do to get my hands dirty? Or do I need to rely on the generosity of one of the committers? Thanx! Dave -

Re: Problem configuring Acegi Spring security login page with Wicket framework

2007-07-30 Thread lubosp
Erik, thanks for the answer. But how do I set the appropriate acegi configutration to specify the login and login error page in: org.acegisecurity.ui.logout.LogoutFilter org.acegisecurity.ui.webapp.AuthenticationProcessingFilter, authenticationFailureUrl property exceptionTranslationFilter, logi

session timeout detection

2007-07-30 Thread Mark Sandori
Does anyone know how to detect a session timeout in Wicket 1.3 Beta 2? Right now a new session is silently being created automatically after a timeout. Thanks, Mark. - To unsubscribe, e-mail: [EMAIL PROTECTED] For addition

Re: ResourceLink - call back?

2007-07-30 Thread Eelco Hillenius
> To cut the problem from the source... Do you need to have a file in the > file system? > > We are using a DynamicWebResource that answers a PDF directly from memory. > Here some code: > >// we have a method that generates the PDF as a byte[] >final byte[] thePDFInBytes = generatePDF(); >

Re: ResourceLink - call back?

2007-07-30 Thread German Morales
Hi, To cut the problem from the source... Do you need to have a file in the file system? We are using a DynamicWebResource that answers a PDF directly from memory. Here some code: // we have a method that generates the PDF as a byte[] final byte[] thePDFInBytes = generatePDF(); Resourc

Re: Switching to SSL for SignIn page

2007-07-30 Thread Upayavira
shumbola wrote: Upayavira-2 wrote: shumbola wrote: I want to be able to switch to SSL when SignIn page showed to a user and if successful, then switch back to normal HTTP protocol. I'm using wicket-1.3. We recently had a security firm audit our application. They pointed out that such an app

Re: Behaviour adding to Component body

2007-07-30 Thread Eelco Hillenius
> yes, tried that already. strangely, gets an additional > xmlns:wicket="http://wicket.apache.org"-attribute?! but it doesn't seem to > hurt. Yeah, that happens in onComponentTag: public void onComponentTag(final Component component, final ComponentTag tag) { ta

Re: Behaviour adding to Component body

2007-07-30 Thread Jan Kriesten
Hi Eelco, > You should be able to pull that off if you use > AbstractTransformerBehavior. yes, tried that already. strangely, gets an additional xmlns:wicket="http://wicket.apache.org"-attribute?! but it doesn't seem to hurt. > Btw, if you ever get to it, a nice Flash > component with a demo f

Re: Behaviour adding to Component body

2007-07-30 Thread Eelco Hillenius
> I thought I could just concentrate on the last aspect and apply only the > needed > changes... (i.e. move an attribute to a ). You should be able to pull that off if you use AbstractTransformerBehavior. Btw, if you ever get to it, a nice Flash component with a demo for wicket-examples would be

Re: Behaviour adding to Component body

2007-07-30 Thread Jan Kriesten
Hi Martijn, > Yep, I was wondering why not create your own ShockWaveComponent that > exposes the parameters using some API, and renders them using a > repeating view? yes, I think there's no other clean way. The problem with is, that it allows nested/alternative content which the browsers show

Re: Behaviour adding to Component body

2007-07-30 Thread Eelco Hillenius
> since I haven't overridden onComponentTagBody yet - what happens to child-Tags > then, do I have to manage these, too? If that's an issue, it's better to follow Martijn's advice and make this component a panel with a list view for the parameters. Eelco -

Re: Behaviour adding to Component body

2007-07-30 Thread Jan Kriesten
Hi Eelco, > Well, what you can do is rather than using a generic > WebMarkupContainer, create a custom class that overrides > onComponentTagBody, create some interface for parameters that this > class understands, expose the ability to add instances of this > interface, and then when the componen

Re: Behaviour adding to Component body

2007-07-30 Thread Eelco Hillenius
On 7/30/07, Martijn Dashorst <[EMAIL PROTECTED]> wrote: > Yep, I was wondering why not create your own ShockWaveComponent that > exposes the parameters using some API, and renders them using a > repeating view? Yeah, you could do that as well. Though directly writing them out in onComponentTagBody

Re: Behaviour adding to Component body

2007-07-30 Thread Igor Vaynberg
On 7/30/07, Jan Kriesten <[EMAIL PROTECTED]> wrote: > > > Hi Igor, > > > i really dont think oncomponenttagbody() belongs in behaviors. this > should > > be done without a behavior by subclassing the component and overriding > > oncomponenttagbody() there. that said you can still hack it by using >

Re: Behaviour adding to Component body

2007-07-30 Thread Martijn Dashorst
Yep, I was wondering why not create your own ShockWaveComponent that exposes the parameters using some API, and renders them using a repeating view? Martijn On 7/30/07, Eelco Hillenius <[EMAIL PROTECTED]> wrote: > > I don't think this should belong in a subclass. IMHO manipulating > > attributes

Re: Behaviour adding to Component body

2007-07-30 Thread Eelco Hillenius
> I don't think this should belong in a subclass. IMHO manipulating attributes > for > a certain type of object should be handled by simply adding a Behaviour. SWF's > are only one example. Other Objects (QuickTime, Real, WMV) have other > Attributes > and parameter needs which is where Behaviou

Re: Behaviour adding to Component body

2007-07-30 Thread Jan Kriesten
Hi Igor, > i really dont think oncomponenttagbody() belongs in behaviors. this should > be done without a behavior by subclassing the component and overriding > oncomponenttagbody() there. that said you can still hack it by using > AbstractTransformerBehavior and some string manipulation code. I

Re: ResourceLink - call back?

2007-07-30 Thread Igor Vaynberg
your webresource knows when its done streaming data, so just delete it there. -igor On 7/30/07, John Carlson <[EMAIL PROTECTED]> wrote: > > > > > > I have a dynamically created pdf report that I make available to the > user via a ResourceLink. In wicket the file is created as a > WebResource. A

Re: Behaviour adding to Component body

2007-07-30 Thread Eelco Hillenius
> i really dont think oncomponenttagbody() belongs in behaviors. this should > be done without a behavior by subclassing the component and overriding > oncomponenttagbody() there. I'm also a bit afraid that exposing that would be too dangerous (not to mention that the interface is already pretty b

ResourceLink - call back?

2007-07-30 Thread John Carlson
I have a dynamically created pdf report that I make available to the user via a ResourceLink. In wicket the file is created as a WebResource. As the report contains sensitive information I want to delete it from the server as soon as it has been downloaded. I couldn't find any 'onDownloadC

Re: Behaviour adding to Component body

2007-07-30 Thread Igor Vaynberg
On 7/30/07, Eelco Hillenius <[EMAIL PROTECTED]> wrote: > > On 7/30/07, Jan Kriesten <[EMAIL PROTECTED]> wrote: > > > > Hi Eelco, > > > > > You can use onRendered and write directly to the response using > > > Response response = component.getResponse(); > > > > not really. I tried that before, But

Re: Behaviour adding to Component body

2007-07-30 Thread Eelco Hillenius
On 7/30/07, Jan Kriesten <[EMAIL PROTECTED]> wrote: > > Hi Eelco, > > > You can use onRendered and write directly to the response using > > Response response = component.getResponse(); > > not really. I tried that before, But that only writes the param after the > close > tag which isn't what is i

Re: Behaviour adding to Component body

2007-07-30 Thread Jan Kriesten
Hi Eelco, > You can use onRendered and write directly to the response using > Response response = component.getResponse(); not really. I tried that before, But that only writes the param after the close tag which isn't what is intended. :-) Result: The param belongs inside the object-tag.

Re: Behaviour adding to Component body

2007-07-30 Thread Eelco Hillenius
> I only can use onComponentTag or onRendered. onRendered already closed the > object-Tag again. onComponentTag seems to be the point to start. But there > doesn't seem to be a way to have the component open tag be rendered and then > have something written to the stream... You can use onRendered

Behaviour adding to Component body

2007-07-30 Thread Jan Kriesten
Hi, I have the following situation and haven't found a solution yet: My Panel gets the following Markup from the designer: I'm now looking for a way to add a behaviour to the swf-MarkupContainer, which changes the attributes/body depending on the browser. My problem is with changing the body

Re: editable form saw a similar issue fixed with forms and pallettes in 1.3

2007-07-30 Thread Ed_
http://mail-archives.apache.org/mod_mbox/wicket-commits/200707.mbox/[EMAIL PROTECTED] Is there any correlation? I am currenlty using 1.2 Ed_ wrote: > > Thanks the toString override seems to work in that the correct values/ids > that I want do get posted back. > Like you mentioned is this th

Re: users Digest 28 Jul 2007 02:38:45 -0000 Issue 3

2007-07-30 Thread Igor Vaynberg
it should be called, paste some code from that formcomponentpanel -igor On 7/30/07, Stephane Boisson <[EMAIL PROTECTED]> wrote: > > From: "Igor Vaynberg" <[EMAIL PROTECTED]> > > > > > > hrm, what version of wicket are you using? > > > > > > 1.3-SNAPSHOT > > > > heh, from when? :) > > > From toda

Re: users Digest 28 Jul 2007 02:38:45 -0000 Issue 3

2007-07-30 Thread Stephane Boisson
From: "Igor Vaynberg" <[EMAIL PROTECTED]> > > > > hrm, what version of wicket are you using? > > > > 1.3-SNAPSHOT > > heh, from when? :) >From today I guess.. :-) Is it correct? daily

Re: general question on dynamic pages

2007-07-30 Thread Eelco Hillenius
> With regard to the Login/Welcome example, I have a problem with the > Login's page's mutator methods being called in the onClick() in the > Welcome page. Your scenario requires that Welcome know too much about > Login. If Welcome and Login depend on the same model, and Welcome > changes the mode

Re: editable form

2007-07-30 Thread Ed_
Thanks the toString override seems to work in that the correct values/ids that I want do get posted back. Like you mentioned is this the right way to do it? Even with this solution in response to the submit I still continue to get an error back - which isn't making much sense to me. http://loca

RE: [Wicket-user] editable form

2007-07-30 Thread Ed _
Thanks the toString override seems to work in that the correct values/ids that I want do get posted back.Like you mentioned is this the right way to do it?Even with this solution in response to the submit I still continue to get an error back - which isn't making much sense to me.http://local

Re: Switching to SSL for SignIn page

2007-07-30 Thread Martijn Dashorst
This message is sent across https from gmail :) It only works however when you use https: in the first place to connect to gmail. The default (http:) is less straining on the server resources I suppose (though Google should have enough of that) Martijn On 7/30/07, shumbola <[EMAIL PROTECTED]> wr

RE: editable form

2007-07-30 Thread Ed _
Thanks the toString override seems to work in that the correct values/ids that I want do get posted back.Like you mentioned is this the right way to do it?Even with this solution in response to the submit I still continue to get an error back - which isn't making much sense to me.http:

ERROR - Internal error cloning object

2007-07-30 Thread Dipu Seminlal
Hi Igor/Eelco and Others, Sorry i am reposting this, can any one please tell me how to get around this issue. I am seeing loads of "Internal error cloning object" error in the log files. I am running on DEPLOYMENT mode and also i have set get().getDebugSettings() .setSerializeSessionAttributes(f

Re: Wicket-auth-roles 1.2.6 1.4 JVM

2007-07-30 Thread Flavio
Yes, I known that is fast and easy but I tried to do it myself and I had problems. Thanks! On 7/30/07, Erik van Oosten <[EMAIL PROTECTED]> wrote: > Hi Flavio, > > It only takes 15 minutes to make it yourself. > But anyway, here is one: > http://omelet.zapto.org/pub/wicket/wicket-auth-roles-1.2.2-

Re: general question on dynamic pages

2007-07-30 Thread Igor Vaynberg
how about a concrete example -igor On 7/30/07, Will Jaynes <[EMAIL PROTECTED]> wrote: > > Thanks for the reply. I appreciate the desirability of thinking more OO > and less request/response. Even so, the Wicket Page class is still > modeling an html page. Where is the "onBeforeLoad" functionalit

Re: users Digest 28 Jul 2007 02:38:45 -0000 Issue 3

2007-07-30 Thread Igor Vaynberg
On 7/30/07, Stephane Boisson <[EMAIL PROTECTED]> wrote: > > Igor wrote: > > > hrm, what version of wicket are you using? > > > 1.3-SNAPSHOT heh, from when? :) -igor to me it looks like abstractsingleselectchoice.convertvalue() does convert > > id back to choice object. > > > > You're right.. B

Re: Wicket-auth-roles 1.2.6 1.4 JVM

2007-07-30 Thread Erik van Oosten
Hi Flavio, It only takes 15 minutes to make it yourself. But anyway, here is one: http://omelet.zapto.org/pub/wicket/wicket-auth-roles-1.2.2-1.4.jar It is derived from Wicket 1.2.2 but we use it in a Wicket 1.2.6 environment on production. Regards, Erik. Flavio wrote: Hi! I'm trying to

Re: general question on dynamic pages

2007-07-30 Thread Will Jaynes
Thanks for the reply. I appreciate the desirability of thinking more OO and less request/response. Even so, the Wicket Page class is still modeling an html page. Where is the "onBeforeLoad" functionality of a web page? Is "onBeforeRender" the equivalent? With regard to the Login/Welcome exampl

Wicket-auth-roles 1.2.6 1.4 JVM

2007-07-30 Thread Flavio
Hi! I'm trying to integrate acegi and wicket on a 1.4 JVM. Can anyone send me wicket-auth-roles without annotations and ported to 1.4? Thanks, Flavio. - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail:

Re: users Digest 28 Jul 2007 02:38:45 -0000 Issue 3

2007-07-30 Thread Stephane Boisson
Igor wrote: > hrm, what version of wicket are you using? 1.3-SNAPSHOT to me it looks like abstractsingleselectchoice.convertvalue() does convert > id back to choice object. > You're right.. But it looks like this method is not called in my case.. I made my component work with a quick hack, bu

Re: [Wicket-user] Doc. of final method getReplaceModel says it can be overridden

2007-07-30 Thread Timo Rantalaiho
On Mon, 30 Jul 2007, Ann Baert wrote: > The "getReplaceModel" method of the AttributeModifier is declared protected & > final, and its docs say that it can be used in subclasses. Well, it can be _used_ in subclasses, as it's protected. - Timo -- Timo Rantalaiho Reaktor Innovations Oy

Doc. of final method getReplaceModel says it can be overridden

2007-07-30 Thread Ann Baert
The "getReplaceModel" method of the AttributeModifier is declared protected & final, and its docs say that it can be used in subclasses. I use wicket 1.3 beta 2 How can this final method be overridden in subclasses? Is this a misperception over here, or is this a documentation or an API mistake

Re: Nicer URLs in Wicket

2007-07-30 Thread Matej Knopp
It's only for 1.3. As for the redirect, it is now configurable per page, there is a constructor parameter that affects whether it redirects. -Matej On 7/30/07, Ayodeji Aladejebi <[EMAIL PROTECTED]> wrote: > does it work with wicket 1.2.x? or its only compatible with 1.3 > > On 7/30/07, Korbinian

Re: Switching to SSL for SignIn page

2007-07-30 Thread shumbola
Upayavira-2 wrote: > > shumbola wrote: >> I want to be able to switch to SSL when SignIn page showed to a user and >> if >> successful, then switch back to normal HTTP protocol. I'm using >> wicket-1.3. > > We recently had a security firm audit our application. They pointed out > that such a

loads of Internal error cloning object

2007-07-30 Thread Dipu Seminlal
Hi all, I am seeing loads of "Internal error cloning object" error in the log files. I am running on DEPLOYMENT mode and also i have set get().getDebugSettings().setSerializeSessionAttributes(false); ( which is not really required when i am on Deployment mode ) in the application class. I have

Re: Switching to SSL for SignIn page

2007-07-30 Thread Upayavira
shumbola wrote: I want to be able to switch to SSL when SignIn page showed to a user and if successful, then switch back to normal HTTP protocol. I'm using wicket-1.3. We recently had a security firm audit our application. They pointed out that such an approach is flawed. Basically, you sec

Switching to SSL for SignIn page

2007-07-30 Thread shumbola
I want to be able to switch to SSL when SignIn page showed to a user and if successful, then switch back to normal HTTP protocol. I'm using wicket-1.3. In my Application class I've come up with the following: protected IRequestCycleProcessor newRequestCycleProcessor() { return new W

Fwd: [Wicket-user] editable form

2007-07-30 Thread Gabor Szokoli
Hi, Sorry if duplicated: On 7/29/07, Ed _ <[EMAIL PROTECTED]> wrote: > > I am trying to create an editable form - this has a drop down list. in it > > List ratingList = cfg.getContentRatingList(); > DropDownChoice ratingChoice = new DropDownChoice("rating", new > PropertyModel(form, "category"),

Re: Bug in Page(PageParameters) constructor?

2007-07-30 Thread MK Tan
On 7/30/07, Thomas Màder <[EMAIL PROTECTED]> wrote: > > > Hi guys, > > In 1.3.0 beta 2, one of the Page constructors reads like so: > > > > protected Page(final PageParameters parameters) > { > super(null); > } > > Note that this will not cause init() to be c

Bug in Page(PageParameters) constructor?

2007-07-30 Thread Thomas Màder
Hi guys, In 1.3.0 beta 2, one of the Page constructors reads like so: protected Page(final PageParameters parameters) { super(null); } Note that this will not cause init() to be called. This in turn causes all such pages to have the numeric id 0. Does

Re: Nicer URLs in Wicket

2007-07-30 Thread Ayodeji Aladejebi
does it work with wicket 1.2.x? or its only compatible with 1.3 On 7/30/07, Korbinian Bachl <[EMAIL PROTECTED]> wrote: > > Hi Matej, > > looks really great! - One thing I dont understand ist: > > You wrote: > * The redirect is necessary for pages with AJAX stuff, so that the > > > > page instance

Re: WebPage onExit Strategy

2007-07-30 Thread Ayodeji Aladejebi
not client side, I am even referring to the possibility of knowing from the server side through wicket pagemap or something that a page has being removed or unloaded. is there a way to know that this but there has to be a way from wicket code (server side) to know the Class of the current WebPage

Re: Nicer URLs in Wicket

2007-07-30 Thread Korbinian Bachl
Hi Matej, looks really great! - One thing I dont understand ist: You wrote: * The redirect is necessary for pages with AJAX stuff, so that the > > > page instance is preserved on reload (otherwise with bookmarkable URL > > > new instance of page would be created on every reload, which discards >