Friday, July 2, 2010

Re: User management in GWT

What is the problem with Shiro ? I am using it for security management with my application and we did not have encountered any problem with its integration. It was only few lines of code :

public void login(String username, String password) {
  Subject currentUser = SecurityUtils.getSubject();
  if (!currentUser.isAuthenticated()) {
UserIdPasswordToken token = new UserIdPasswordToken(username, password);
currentUser.login(token);
  }
}

Then, I use some annotation binded with guice on server side :

@RequiresPermissions
@RequiresRoles
@RequiresUser
@RequiresGuest
@RequiresAuthentication

And I've got a filter that catch all Shiro Exceptions and transforms them to a gwt client "understandable" exception. Then, as soon as a Security Exception is sent on the client, I redirect user on a login popup.

I did not tried Acegi because I prefered to use guice on server side than spring.

2010/7/2 Jim <rightscript@gmail.com>
Hi M.

   I'm also here checking out GWT and I believe I
may have tested something that may help you.

I think it was while I was running some of the examples
in the GWT section of "What's Coming in 2.1" using the
MVP Framework.

In this section there's a link to  Spring Roo >> http://www.springsource.org/roo

It's a bit of work, but after setting everything up there's a
Roo demo application there that has a simple login to demonstrate the
security features of the Spring Roo Framework.  If you are
familiar with Ruby on Rails, it seems to me that Spring Roo has
the same powerful funcionality ... and I love the way they use the
console and simple commands to generate the framework, and also,
what they call 'entities'.  All this, of course, done in Java code.

Perhaps you can ask for more info at their site.  It's been awhile
since I ran the demos ... but I'm pretty sure this is what you're
looking for.

Hope this helps.
Jim

--
You received this message because you are subscribed to the Google Groups "Google Web Toolkit" group.
To post to this group, send email to google-web-toolkit@googlegroups.com.
To unsubscribe from this group, send email to google-web-toolkit+unsubscribe@googlegroups.com.
For more options, visit this group at http://groups.google.com/group/google-web-toolkit?hl=en.


--
You received this message because you are subscribed to the Google Groups "Google Web Toolkit" group.
To post to this group, send email to google-web-toolkit@googlegroups.com.
To unsubscribe from this group, send email to google-web-toolkit+unsubscribe@googlegroups.com.
For more options, visit this group at http://groups.google.com/group/google-web-toolkit?hl=en.

No comments:

Post a Comment