Re: Wicket Spring boot versus actuator (wicket 8.2.0) + spring security (boot 2.1.2)

2019-01-24 Thread Zbynek Vavros
Took me some time to understand as well so I'm glad share :) I'm in process of tuning this setup so just out of curiosity how did you set up the Wicket properties file(s)? I don't like the idea to having properties in src/main/java and looking for proper way to load them from custom location like

Re: Wicket 8 and Edge : Known compatibilities problem ?

2019-01-24 Thread Martin Grigorov
Hi, We are not aware of any issues with MS Edge. The error message is really strange though! Here is something that I've found: https://answers.microsoft.com/en-us/windows/forum/windows_10-windows_store/youll-need-a-new-app-to-open-this-https/631579eb-4051-42d9-96cc-3909690421e5 On Thu, Jan 24,

Re: Wicket Spring boot versus actuator (wicket 8.2.0) + spring security (boot 2.1.2)

2019-01-24 Thread nino martinez wael
Yes this is exactly how I've done it :) Thanks for taking time to help... @WicketSignInPage @MountPath("page/login") public class LoginPage extends BasePage { public LoginPage(PageParameters parameters) { super(parameters); if (((AbstractAuthenticatedWebSession) getSession()).isSignedIn()) {

Wicket 8 and Edge : Known compatibilities problem ?

2019-01-24 Thread andre seame
Hello, I have a wicket application that is Ok with Mozilla. My company will to use windows 10 and Edge. I did some test and I have an error message : You need a new application to see this page. Is this a know bug for edge ? A bad configuration of my HTML code ? a New security option of the

Re: Wicket Spring boot versus actuator (wicket 8.2.0) + spring security (boot 2.1.2)

2019-01-24 Thread Zbynek Vavros
Is seems you have mixed my code with your code somehow. You must configure formLogin() and specify loginPage() pointing to your Wicket login page (maybe using @MountPath?). The .loginProcessingUrl() points to "/fake-url" because the authentication itself is called from Wicket login page via

Re: Wicket Spring boot versus actuator (wicket 8.2.0) + spring security (boot 2.1.2)

2019-01-24 Thread nino martinez wael
It sort of works, If I go to the actuator I get the http basic auth, if I on the same session goto my pages.. I get an "ugly" access denied page and not the configured wicket login page. So it sort of works.. If I just goto localhost:8080/ I get an default spring login page not the wicket one..

Re: Wicket Spring boot versus actuator (wicket 8.2.0) + spring security (boot 2.1.2)

2019-01-24 Thread nino martinez wael
Thanks will try it:) On Thu, Jan 24, 2019 at 3:14 PM Zbynek Vavros wrote: > In my case it works something like this: > > @Configuration > @EnableWebSecurity > public class SecurityConfiguration { > > @Configuration > @Order(1) > public static class RestSecurityConfig extends >

Re: Wicket Spring boot versus actuator (wicket 8.2.0) + spring security (boot 2.1.2)

2019-01-24 Thread Zbynek Vavros
In my case it works something like this: @Configuration @EnableWebSecurity public class SecurityConfiguration { @Configuration @Order(1) public static class RestSecurityConfig extends WebSecurityConfigurerAdapter { .. user details service, auth providers etc

Re: Wicket Spring boot versus actuator (wicket 8.2.0) + spring security (boot 2.1.2)

2019-01-24 Thread Zbynek Vavros
Hi, I did similar thing, the trick here is to use two WebSecurityConfigurerAdaptes. Zbynek On Thu, Jan 24, 2019 at 2:55 PM nino martinez wael < nino.martinez.w...@gmail.com> wrote: > Hope its okay to use the wicket user mailing list for this:) > > First of all thanks to MarcGiffing for making

Re: Wicket Spring boot versus actuator (wicket 8.2.0) + spring security (boot 2.1.2)

2019-01-24 Thread nino martinez wael
do you have an example? OR is it just to cut them into two like: WebSecurityConfigurerAdapter A: http.authorizeRequests().antMatchers("/actuator/**","/actuator").hasRole("ACTUATOR").and().httpBasic(); WebSecurityConfigurerAdapter B: http .csrf().disable()

Re: Wicket Spring boot versus actuator (wicket 8.2.0) + spring security (boot 2.1.2)

2019-01-24 Thread nino martinez wael
Already done that.. Thanks for the idea.. On my webservice project I am doing this: http .authorizeRequests() .antMatchers("/services/**").hasRole("USER").and().httpBasic().and(). csrf().disable(); http .authorizeRequests()

Re: Wicket Spring boot versus actuator (wicket 8.2.0) + spring security (boot 2.1.2)

2019-01-24 Thread Andrea Del Bene
I had a problem with Spring Boot 2 and actuator as many of them are disabled by default in the new version. I don't know if this is the case for you, but I would try enabling all of them via config file. For example with yml is something like: management: endpoints: web: exposure:

Wicket Spring boot versus actuator (wicket 8.2.0) + spring security (boot 2.1.2)

2019-01-24 Thread nino martinez wael
Hope its okay to use the wicket user mailing list for this:) First of all thanks to MarcGiffing for making the project. But I cannot get actuator endpoints to work with spring security and wicket spring boot.. I've tried a lot of things.. IN my WebSecurityConfigurerAdapter: http