Re: T5: pagelink

2008-08-06 Thread Daniel Jue
You could also change the default HTTPS port in your app server configuration, and then your don't have to worry about modifying the URIs. The default is of course 443. The https:// protocol can be used in exactly the same way as the http:// protocol. The differences are that HTTPS uses a

Re: T4/T5 Mix: Fileupload doesn't work in T4.

2008-08-06 Thread Inge Solvoll
For reference, in case there are more people out there who are too stupid/lazy to find this in the docs: I added the following class, my tapestryfilter is named tapestry5 public class Tapestry5Module { /** * Makes tapestry 5 filter ignore requests to Struts and T4. */ public static

Re: Tapestry 5.0.14-SNAPSHOT

2008-08-06 Thread Peter Stavrinides
Thanks for the feedback Howard! +1 for releasing .14 as beta... would releasing it even affect the final release date either way? if not, then why not? Angelo, no worries! I do understand your point of view. Tapestry 5 is looking very solid now, in fact I would go so far as to say Tapestry

IPage and ILink difference

2008-08-06 Thread Yohan Yudanara
Dear all, what is the difference between using IPage and ILink for redirecting page? Which one is recommended to be put on listener that will load another page? From googling on the net, I found this explanation: An ILink will cause a redirect url to be sent to the browser. An IPage will be

Re: T5 application behaviour behind an apache web server

2008-08-06 Thread Peter Stavrinides
Hi Grigoris, This is a standard configuration issue which has little to do with Tapestry, you use a reverse proxy, but also need to have a sticky session and also set the route/JVMRoute parameter. In Tomcat you set it on the connector in server.xml (should be similar for JBoss). This is

Re: T5: How to protect against 'Cross-site request forgery'?

2008-08-06 Thread 9902468
Hi, CSRF solution could be the base for the solution to my problem, described here: http://www.nabble.com/T5-double-click---multiple-windows-on-same-session-prevention-to18807447.html Could you post the code? I think that I need only to customize it so that it changes the sid to every

Re: https actionlink

2008-08-06 Thread Lutz Hühnken
Hi, have a look at http://tapestry.apache.org/tapestry5/tapestry-core/guide/secure.html;. If the first paragraph - @Secure - does not work for you (which seems odd by the way because for me it seems to work just fine in 5.0.13), you can configure it in your AppModule.java, see the other two

Re: T5: pagelink

2008-08-06 Thread Argo Vilberg
My problem is that, my first page is http and after that are pages https. If i switch to https, then ID-Card authentication is occour in tomcat. Thatsway i must use both protocol. But how to change http,https and ports in appModule.java 2008/8/6 Daniel Jue [EMAIL PROTECTED] You could also

T5: Kudos!

2008-08-06 Thread Inge Solvoll
Hi! My T5 demo app is now pretty much up and running, it didn't take me too much time to configure some rather advanced features as well. Really positive experience so far! In particular I really like how simple it is to create new components/pages. This has been the biggest drag about T4, that

T5: Problem with assets

2008-08-06 Thread Inge Solvoll
Hi! I'm having trouble with the default assets, default.css, tapestry.js and so on. The same error message applies to all of them: Failure to export classpath resource /5.0.13/tapestry.js. Session id: 62F38BA7F22A8AB2F6B3C1C42B3DE98D Exceptions:

Re: T5: Kudos!

2008-08-06 Thread Andy Pahne
Inge Solvoll schrieb: ... In particular I really like how simple it is to create new components/pages. This has been the biggest drag about T4, that it was so much hassle creating a new component and getting it to work that I almost always ended up writing monolithic pages with few custom

message catalog reuse / chaining

2008-08-06 Thread mailinglist
Hello! We have a small component displaying an address form. So we put the tml, java and localization properties below the component directories. If we reuse this component inside a page using the component annotation we need to duplicate all localizations properties otherwise we get

Re: T5: How to protect against 'Cross-site request forgery'?

2008-08-06 Thread Christian Edward Gruber
Ok, people should read the whitepaper. Part of it describes how http gets and using query parameters are somewhat easier to do request forging on than posts. I have to think through the filter approach, but the big deal is on forms. However, several app design principles also apply - in

Form validation question

2008-08-06 Thread photos
From reading the documentation I am under the impression that during form submission a VALIDATE_FORM event is emitted once. However, I observe onValidate() being called for every component in the form, the value from the component not being set until *after* onValidate has apparently been

Re: T5: How to protect against 'Cross-site request forgery'?

2008-08-06 Thread 9902468
I don't think that people should trust post anymore than get. Period. They should both be regarded as dangerous. The second issue of placing too much load on server is valid, but can be lowered as the unique request part in the token can be achieved using a running number on the generated token,

T5: Dynamic asset path

2008-08-06 Thread Inge Solvoll
Hi! I would like to do something like this, but this syntax obviously doesn't work. The ${bannerPath} seems to be pointing to a symbol, which obviously isn't a page property. Is there a similar way to do this? @Inject @Path(${bannerPath}) private Asset banner; public String

Re: what happened to the plugin snapshots....

2008-08-06 Thread Brian Fox
As I said before, this was done by infra with no notice to us. The new policy of purging is theirs, not ours. See the infra archives if you would like to read about it. On Aug 5, 2008, at 10:45 PM, Patrick Moore [EMAIL PROTECTED] wrote: Of course this means that the maven team is

Re: T5: Dynamic asset path

2008-08-06 Thread Inge Solvoll
Also, I can't seem to find out how to reference this asset in the .tml. Tried a lot similar to this, nothing worked: img src=asset:banner/ Also tried annotating private Asset banner with @Property, no diffference. The only thing I got working is this: img

Re: T5: Dynamic asset path

2008-08-06 Thread 9902468
Hi, I did this: Java: @Inject private AssetSource assetSource; public ListLanguage getLanguages(){ return parameterManager.getLanguages(); } @Property private Language language; public String getLanguageAsset(){ Asset asset =

RE: Form validation question

2008-08-06 Thread Jonathan Barker
Validate events are indeed called for each component, and then a validate event is called for the entire form. If your fields are usernameField and passwordField in a loginForm, you would expect: onValidateFromUsernameField() onValidateFromPasswordField() onValidateFormFromLoginForm(); With a

Re: T5: Dynamic asset path

2008-08-06 Thread Inge Solvoll
Thanks! Not the prettiest thing I ever saw, I would have preferred a more straghtforward approach from the framework. I need that code pretty often in most of my pages. But I guess I'll manage to hide it in some utility method. On Wed, Aug 6, 2008 at 4:00 PM, 9902468 [EMAIL PROTECTED] wrote:

T5 - inPlaceEditor

2008-08-06 Thread David Molina
Hi, I have this code of the page class: @Component(parameters = {source=allItems, row=item } ) private Grid _grid; @Component(parameters = {value=item.code, context=item.code, size=30}) private InPlaceEditor _inPlaceEditor; @OnEvent(component = inPlaceEditor, value =

Re: IPage and ILink difference

2008-08-06 Thread Howard Lewis Ship
Generally, returning a page is what you want. Returning an ILink is generally used for redirect after post processing in Tapestry 4. On Tue, Aug 5, 2008 at 11:25 PM, Yohan Yudanara [EMAIL PROTECTED] wrote: Dear all, what is the difference between using IPage and ILink for redirecting page?

Re: T5: pagelink

2008-08-06 Thread tapestry5
I have my app server configured to https default. Pages without @secure annotation and contributeAlias opens but all the links are still http. (Not sure why that is happening). Pages with @Secure annotation and contributeAlias will give an exception The page isn't redirecting properly (Not

Re: T5: Problem with assets

2008-08-06 Thread Josh Canfield
Hi, So, you are trying to load the T5 stylesheet/javascript resources from the T4 AssetService? Is that intentional? What is the url that is generated for those errors? Is it possible that it's getting directed to your T4 app instead of T5? The path /5.0.13/default.css seems odd to me, but I'm

Re: T5: Problem with assets

2008-08-06 Thread Inge Solvoll
I have both T4 and T5 in my app. T4 assets was mapped to /asset... Thanks again for very valuable help! I should probably post a list of potential problems when running both T4 and T5 :) On Wed, Aug 6, 2008 at 6:38 PM, Josh Canfield [EMAIL PROTECTED] wrote: Hi, So, you are trying to load

Re: T5: pagelink

2008-08-06 Thread tapestry5
It seams that my production application server is running in behind Http server. Daniel Jue wrote: You could also change the default HTTPS port in your app server configuration, and then your don't have to worry about modifying the URIs. The default is of course 443. The https://

[T5]

2008-08-06 Thread kace
Hi fellas, Do you have to compile .tml files if you want the changes to be picked up by jetty? I know you have to for the java classes but I find that I dont have to compile my Index.tml file which is located under /webapp/Index.tml for the changes to be picked up but I do for the Layout.tml

T5: Event handler and @InjectPage seems not to work

2008-08-06 Thread Martijn Brinkers (List)
I have a page that contains an event handler for an event from an embedded component. From the event handler I would like to request another page and with some value 'injected' (using a setter). Pseudocode: @InjectPage SomePage downloadPage; @OnEvent(component=component, value=someEvent)

Re: T5: Event handler and @InjectPage seems not to work

2008-08-06 Thread Martijn Brinkers (List)
I found my (stupid) mistake. I had a @Property and a setter so the setter was not called. martijn On Wed, 2008-08-06 at 13:54 -0700, Martijn Brinkers (List) wrote: I have a page that contains an event handler for an event from an embedded component. From the event handler I would like to

Re: [T5]

2008-08-06 Thread Howard Lewis Ship
This is really dependent on your IDE. The .tml files are NOT compiled; but in IntelliJ you have to make sure that changes to them are copied to the right folder (there are options for this in the Jetty launch configuration screen). On Wed, Aug 6, 2008 at 12:53 PM, kace [EMAIL PROTECTED] wrote:

Tapestry 4.1 app

2008-08-06 Thread Paul Stanton
http://www.gunnsoft.com.au:8080/Budget/ I've been working on this for a while, and feel it's nearing stability. Feel free to have a play around. It's free. Paul. - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional

Extra paramer in Grid Sort

2008-08-06 Thread tapestry5
I am using t:grid source=dummy row=dummy mode=model component. I also have Grid Sort feature in that. Now i need to pass some extra parameter in that Grid Sort links. When i view the source of sort link i see ../../../testreportdisp.grid.columns:sort/name Name I want to add two more

Re: T5: How to protect against 'Cross-site request forgery'?

2008-08-06 Thread Christian Edward Gruber
Incidentally, on Java get and post are the same, unless someone implements the servlet and overrides post and get. At present, get and post both direct to the same method. That's bad. But I'm not saying trust post, I'm saying that get is worse than post, except that the above turns them

Re: T5: How to protect against 'Cross-site request forgery'?

2008-08-06 Thread 9902468
I read the document and it is good. I wasn't referring to non-cryptographic tokens, just to the fact that the whole token doesn't have to be generated every request, just the request unique part. Imagine what ever token that you would use: I would just concatenate the unique request part to it.

Re: T5: How to protect against 'Cross-site request forgery'?

2008-08-06 Thread 9902468
Thank you! This is something I can use and extend. - 99 Martijn Brinkers (List)-2 wrote: I have added a howto http://wiki.apache.org/tapestry/Tapestry5CSRF Martijn On Wed, 2008-08-06 at 00:13 -0700, 9902468 wrote: Hi, CSRF solution could be the base for the solution to my