Help

Controls

PermLinkWikiLink

Built with Seam

You can find the full source code for this website in the Seam package in the directory /examples/wiki. It is licensed under the LGPL.

Forum: Seam Users Forum ListTopic List
14. Feb 2008, 14:09 CET | Link

Does anyone have an example application where using just .html/.xhtml, web.xml, components.xml, and a seam application, you can login/authenticate and simple example of authorization?

I've been having a really, really hard time over the past 16 hours trying to do just that.

The intent is for other UI utilization (such as GWT), but no working examples of JAAS without JSF/JSP seem to exist.

Thanks, been pulling my hair out...

-D

11 Replies:
14. Feb 2008, 15:48 CET | Link

This is worth a try. Complete the setup in 13.4.8.1 in the seam documentation which will use your container's JAAS configuration You can just create an HTML/XHTML file with something like the following: 


<form id='security_check' action='j_security_check'>
   Username: <input type='text' id='j_username'/>
   Password: <input type='password' id='j_password'/>
</form>

and then implement your Authenticator which Seam will call on for you.

 
Dan Hinojosa Seam :: Groovy :: Swing Developer/Consultant/Instructor Albuquerque, NM
14. Feb 2008, 15:59 CET | Link

yup, already tried that, and I still can't get it to work.

The project I can not get to work is here (showing how much stuff I've already tried): http://jira.jboss.org/jira/browse/JBSEAM-2325

Call me an idiot, I don't care, I need a full, working example to make sure nothing is missed.

.html/.xhtml component.xml web.xml seam classes (like the authenticator)

14. Feb 2008, 16:45 CET | Link

So....just checking on some other stuff. I assume you already put all the security-constraints, web-resource-collections, and auth-constraints into the web.xml? Another thing that I know is that if you use the jboss/tomcat combination or any tomcat based app, the JAAS security is challenge-based only.

P.S. I won't call you an idiot, it's just not my style....Plus I tend to f**k things up more than a lot of people (just the way I learn) so I'd be a complete hypocrite in doing so. ;)

 
Dan Hinojosa Seam :: Groovy :: Swing Developer/Consultant/Instructor Albuquerque, NM
14. Feb 2008, 22:47 CET | Link
Daniel Hinojosa wrote on Feb 14, 2008 04:45 PM:
I assume you already put all the security-constraints, web-resource-collections, and auth-constraints into the web.xml

yes, setup with web.xml

14. Feb 2008, 22:51 CET | Link

uh - WTF? The forum just clipped all my content :-(

To repeat:

Yes, setup security contraint on web.xml. Tried without security constraint. Tried a variety of combinations without success. One sample implementation that I tried, with actual code and config files, is here:

http://jira.jboss.org/jira/browse/JBSEAM-2325

Old forum post with some info, but probably not useful as no one responded:

http://www.jboss.com/index.html?module
14. Feb 2008, 23:39 CET | Link

Did the text preview work? Did you use it? Did you use the formatting dropdown or the HELP? We need to know what the problem is.

 

Check out my weblog or have a look at the books I wrote.

21. Feb 2008, 17:06 CET | Link

Forgot to ask, did you also set up the JAAS on your app server, in login-config.xml?

 
Dan Hinojosa Seam :: Groovy :: Swing Developer/Consultant/Instructor Albuquerque, NM
21. Feb 2008, 17:11 CET | Link

yes, I setup the JAAS realm in the login-config.xml.

You can also dynamically load the JAAS realms through a jboss SAR approach, which is what I do (this is proven again and again, this works correctly).

<mbean code="org.jboss.security.auth.login.DynamicLoginConfig" name="com.domain.app:service=DynamicLoginConfig"> <attribute name="AuthConfig">myapp-login-config.xml</attribute> <depends optional-attribute-name="LoginConfigService">jboss.security:service=XMLLoginConfig</depends> <depends optional-attribute-name="SecurityManagerService">jboss.security:service=JaasSecurityManager</depends> </mbean>

However, the dynamic login approach has no bearing, as I've tested with directly changed login-config.xml as well just to make triple sure.
21. Feb 2008, 17:22 CET | Link

If someone could create a working sample project that uses the JAAS login approach without JSF or JSP, it would be very easy to move forward from there -- avoid a lot of question/answers about a capability or feature that may not exist.

The documentation has proven very clearly (to me) to be insufficient. If someone feels the documentation is sufficient, prove me wrong with a working example :-)
05. May 2008, 15:58 CET | Link

Seam login with JAAS without JSF or JSP (i.e. normal HTML/XHTML). Intent is to incorporate with GWT (or, if you have a GWT example, that'll be great as well).
01. Dec 2008, 09:00 CET | Link

Hi Darren,

I too need implement JAAS security with HTML/JSP pages in JBOSS-Seam application. Do you have any sample application that you can share with me.

Thanks in advance, Amit