You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@wicket.apache.org by dlipski <da...@gmail.com> on 2008/09/08 21:59:43 UTC
newbie problem with wicket...
Hi
Im developing with Wicket for short time so forgive me if I misanderstood
some Wicket concepts.
Recently I was asked for develop SSO-like feature for Wicket powered web
application.
Application uses wicket-auth-roles + Acegi for securing wicket pages.
What I have to do is to let authenticate users to this web app only by
typing URL in their web browsers (or clicking some prepared link).
This URL will contain username and password but user will not be forced to
fill in any form or press any button - just typing url or cliciking some
prepared link.
Actual way of uthentication (via Wicket page) must remain, so there will be
two ways to login to application: either by filling in form or typing url in
web browser.
Because this application is using wicket-auth-roles what I have to do is to
retrive from request user login and password and call signIn(username,
password) on Session object.
This is the moment where problem begins (for me).
I've tried to write simple servlet to do this but when I've accessed Wicket
session by: Session.get() runtime exception was thrown because Wicket
session cant be created outside request cycle...
...so I decided to do this inside request cycle, but actually I dont know
any simple solution to execute some code (after sending bookmarkable
request) and redirect to some WicketPage.
What I need is something like BookmarkablePage but dont displaying any page,
only redirecting to other page (after executing autentication,or some other
code), something which might be called BookmarkableAction ;).
Probably it is possible to write custom request target and extend request
target processor (to create such target) but it looks too complicated for me
to perform some simple task.
In action oriented frameworks (Struts/SpringMVC/...) its trivial, I know
that Wicket is page oriented framework but Im wondering if there is any
support for such 'actions'.
Maybe there is some other way to achive such SSO-like feature ?
Regards
Daniel
--
View this message in context: http://www.nabble.com/newbie-problem-with-wicket...-tp19379970p19379970.html
Sent from the Wicket - User mailing list archive at Nabble.com.
---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@wicket.apache.org
For additional commands, e-mail: users-help@wicket.apache.org
Re: newbie problem with wicket...
Posted by dlipski <da...@gmail.com>.
I don't have secure base page because project is using wicket-auth-roles with
AnnotationsRoleAuthorizationStrategy so there is no need for such page.
Maybe I misunderstood your idea.... ?
Johan Compagner wrote:
>
> Why dont you have a securebasepage class where you do that check for
> login and login if there is that data in the request?
>
> On 9/8/08, dlipski <da...@gmail.com> wrote:
>>
>> Hi
>>
>> Im developing with Wicket for short time so forgive me if I misanderstood
>> some Wicket concepts.
>> Recently I was asked for develop SSO-like feature for Wicket powered web
>> application.
>> Application uses wicket-auth-roles + Acegi for securing wicket pages.
>> What I have to do is to let authenticate users to this web app only by
>> typing URL in their web browsers (or clicking some prepared link).
>> This URL will contain username and password but user will not be forced
>> to
>> fill in any form or press any button - just typing url or cliciking some
>> prepared link.
>> Actual way of uthentication (via Wicket page) must remain, so there will
>> be
>> two ways to login to application: either by filling in form or typing url
>> in
>> web browser.
>> Because this application is using wicket-auth-roles what I have to do is
>> to
>> retrive from request user login and password and call signIn(username,
>> password) on Session object.
>> This is the moment where problem begins (for me).
>> I've tried to write simple servlet to do this but when I've accessed
>> Wicket
>> session by: Session.get() runtime exception was thrown because Wicket
>> session cant be created outside request cycle...
>> ...so I decided to do this inside request cycle, but actually I dont know
>> any simple solution to execute some code (after sending bookmarkable
>> request) and redirect to some WicketPage.
>> What I need is something like BookmarkablePage but dont displaying any
>> page,
>> only redirecting to other page (after executing autentication,or some
>> other
>> code), something which might be called BookmarkableAction ;).
>> Probably it is possible to write custom request target and extend request
>> target processor (to create such target) but it looks too complicated for
>> me
>> to perform some simple task.
>> In action oriented frameworks (Struts/SpringMVC/...) its trivial, I know
>> that Wicket is page oriented framework but Im wondering if there is any
>> support for such 'actions'.
>>
>> Maybe there is some other way to achive such SSO-like feature ?
>>
>> Regards
>> Daniel
>> --
>> View this message in context:
>> http://www.nabble.com/newbie-problem-with-wicket...-tp19379970p19379970.html
>> Sent from the Wicket - User mailing list archive at Nabble.com.
>>
>>
>> ---------------------------------------------------------------------
>> To unsubscribe, e-mail: users-unsubscribe@wicket.apache.org
>> For additional commands, e-mail: users-help@wicket.apache.org
>>
>>
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: users-unsubscribe@wicket.apache.org
> For additional commands, e-mail: users-help@wicket.apache.org
>
>
>
--
View this message in context: http://www.nabble.com/newbie-problem-with-wicket...-tp19379970p19387046.html
Sent from the Wicket - User mailing list archive at Nabble.com.
---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@wicket.apache.org
For additional commands, e-mail: users-help@wicket.apache.org
Re: newbie problem with wicket...
Posted by Johan Compagner <jc...@gmail.com>.
Why dont you have a securebasepage class where you do that check for
login and login if there is that data in the request?
On 9/8/08, dlipski <da...@gmail.com> wrote:
>
> Hi
>
> Im developing with Wicket for short time so forgive me if I misanderstood
> some Wicket concepts.
> Recently I was asked for develop SSO-like feature for Wicket powered web
> application.
> Application uses wicket-auth-roles + Acegi for securing wicket pages.
> What I have to do is to let authenticate users to this web app only by
> typing URL in their web browsers (or clicking some prepared link).
> This URL will contain username and password but user will not be forced to
> fill in any form or press any button - just typing url or cliciking some
> prepared link.
> Actual way of uthentication (via Wicket page) must remain, so there will be
> two ways to login to application: either by filling in form or typing url in
> web browser.
> Because this application is using wicket-auth-roles what I have to do is to
> retrive from request user login and password and call signIn(username,
> password) on Session object.
> This is the moment where problem begins (for me).
> I've tried to write simple servlet to do this but when I've accessed Wicket
> session by: Session.get() runtime exception was thrown because Wicket
> session cant be created outside request cycle...
> ...so I decided to do this inside request cycle, but actually I dont know
> any simple solution to execute some code (after sending bookmarkable
> request) and redirect to some WicketPage.
> What I need is something like BookmarkablePage but dont displaying any page,
> only redirecting to other page (after executing autentication,or some other
> code), something which might be called BookmarkableAction ;).
> Probably it is possible to write custom request target and extend request
> target processor (to create such target) but it looks too complicated for me
> to perform some simple task.
> In action oriented frameworks (Struts/SpringMVC/...) its trivial, I know
> that Wicket is page oriented framework but Im wondering if there is any
> support for such 'actions'.
>
> Maybe there is some other way to achive such SSO-like feature ?
>
> Regards
> Daniel
> --
> View this message in context:
> http://www.nabble.com/newbie-problem-with-wicket...-tp19379970p19379970.html
> Sent from the Wicket - User mailing list archive at Nabble.com.
>
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: users-unsubscribe@wicket.apache.org
> For additional commands, e-mail: users-help@wicket.apache.org
>
>
---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@wicket.apache.org
For additional commands, e-mail: users-help@wicket.apache.org