Validating a PropertyListView

2013-05-28 Thread madmax108
Hi, I have a bunch of properties and I want to provide the user a form to override the properties, but the issue is that some of these properties are range bound (eg. value can be between 10 and 100), some of them are range bound on a single side (eg. value can only be greater than 5), and some of

Re: Validating a PropertyListView

2013-05-28 Thread Martin Grigorov
Hi, listView.setReuseItems(true); TextFieldInteger tf = new TextFieldInteger(someId, model); tf.add(RangeValidator.(range|minimum|maximum)(...)); listItem.add(tf); On Tue, May 28, 2013 at 9:29 AM, madmax108 lifeofna...@gmail.com wrote: Hi, I have a bunch of properties and I want to provide

Dynamic listview

2013-05-28 Thread Martin Makundi
Hi! Is it possible to implement a listview that evaporates on detach and builds itself again whenever one iterates over its items? We have a huge page with thuge listview and the serialization/deserialization of the structure slows down the page. The models are detachable and maybe the

Re: Dynamic listview

2013-05-28 Thread Martin Grigorov
Hi, You can use ListView#removeAll() in #detach() but then this ListView should not have any action components like Link/Button and any FormComponents in its items, because they won't be reachable. It can have pretty much only Labels inside. On Tue, May 28, 2013 at 10:01 AM, Martin Makundi

Re: Dynamic listview

2013-05-28 Thread Martin Makundi
Is it possible to have the listview rebuild itself upon form processing to allow formcomponents? ** Martin 2013/5/28 Martin Grigorov mgrigo...@apache.org: Hi, You can use ListView#removeAll() in #detach() but then this ListView should not have any action components like Link/Button and any

Re: Dynamic listview

2013-05-28 Thread Ernesto Reinaldo Barreiro
Martin, You could use something that builds itself at client side... while at server side is still very lightweight. Something like http://www.antiliasoft.com/wicket-angular-demo/filtering See for explanation. http://www.antiliasoft.com/wicket-angular-demo/ On Tue, May 28, 2013 at 11:01 AM,

Protection against CSRF (Cross-Site Request Forgery) attacks in Apache Wicket 6

2013-05-28 Thread Magnus K Karlsson
Hi, I'm looking for protection against CSRF and found and old issue for Apache Wicket 1.3.4. https://issues.apache.org/jira/browse/WICKET-1782 And as far as have understood the Apache Wicket does not support Synchronizer Token Pattern, as suggested at

Re: Dynamic listview

2013-05-28 Thread Martin Makundi
You could use something that builds itself at client side... while at server side is still very lightweight. Something like http://www.antiliasoft.com/wicket-angular-demo/filtering See for explanation. http://www.antiliasoft.com/wicket-angular-demo/ This is mainly read-only? We would

Re: Validating a PropertyListView

2013-05-28 Thread madmax108
Ah... cool! :) Will try this and let you know! The code u sent is very similar to what I have, and just reminded me of a way I can get this done Thanks again... will get back with the results :) -- View this message in context:

wicketstuff-jasperreports dependency to jasper reports

2013-05-28 Thread Dieter Tremel
In wicketstuff-jasperreports the dependency to jasper is dependency groupIdjasperreports/groupId artifactIdjasperreports/artifactId /dependency That leads to version 3.5.3 I found

Re: Dynamic listview

2013-05-28 Thread Martin Grigorov
You can try to do this in org.apache.wicket.markup.html.form.Form#process(IFormSubmitter) { rebuild(); super.process(formSubmitter); } On Tue, May 28, 2013 at 10:29 AM, Martin Makundi martin.maku...@koodaripalvelut.com wrote: Is it possible to have the listview rebuild itself upon form

Re: wicketstuff-jasperreports dependency to jasper reports

2013-05-28 Thread Martin Grigorov
Hi Dieter, No one worked on this integration lately. You can form wicketstuff/core project and send a pull request with the upgrade. Thanks! On Tue, May 28, 2013 at 10:34 AM, Dieter Tremel tre...@tremel-computer.dewrote: In wicketstuff-jasperreports the dependency to jasper is

Re: Dynamic listview

2013-05-28 Thread Ernesto Reinaldo Barreiro
You could not use normal form processing, I guess, as there will not be any form components at server side... (they will be removed after list is displayed). So, you will have to do some ticks to map cliente state with server state. The examples above could be make to work for non read-only

Re: Protection against CSRF (Cross-Site Request Forgery) attacks in Apache Wicket 6

2013-05-28 Thread Martin Grigorov
Hi, On Tue, May 28, 2013 at 10:32 AM, Magnus K Karlsson magnus.r.karls...@gmail.com wrote: Hi, I'm looking for protection against CSRF and found and old issue for Apache Wicket 1.3.4. https://issues.apache.org/jira/browse/WICKET-1782 And as far as have understood the Apache Wicket does

Re: Dynamic listview

2013-05-28 Thread Martin Makundi
You could not use normal form processing, I guess, as there will not be any form components at server side... (they will be removed after list is displayed). So, you will have to do some ticks to map cliente state with server state. The examples above could be make to work for non read-only

Re: Dynamic listview

2013-05-28 Thread Martin Grigorov
On Tue, May 28, 2013 at 10:41 AM, Martin Makundi martin.maku...@koodaripalvelut.com wrote: You could not use normal form processing, I guess, as there will not be any form components at server side... (they will be removed after list is displayed). So, you will have to do some ticks to

Re: Dynamic listview

2013-05-28 Thread Ernesto Reinaldo Barreiro
Hi, On Tue, May 28, 2013 at 11:46 AM, Martin Grigorov mgrigo...@apache.orgwrote: On Tue, May 28, 2013 at 10:41 AM, Martin Makundi martin.maku...@koodaripalvelut.com wrote: You could not use normal form processing, I guess, as there will not be any form components at server side...

Re: Dynamic listview

2013-05-28 Thread Martin Makundi
2013/5/28 Martin Grigorov mgrigo...@apache.org: On Tue, May 28, 2013 at 10:41 AM, Martin Makundi martin.maku...@koodaripalvelut.com wrote: You could not use normal form processing, I guess, as there will not be any form components at server side... (they will be removed after list is

Re: Dynamic listview

2013-05-28 Thread Martin Grigorov
Hi Ernesto, On Tue, May 28, 2013 at 10:51 AM, Ernesto Reinaldo Barreiro reier...@gmail.com wrote: Hi, On Tue, May 28, 2013 at 11:46 AM, Martin Grigorov mgrigo...@apache.org wrote: On Tue, May 28, 2013 at 10:41 AM, Martin Makundi martin.maku...@koodaripalvelut.com wrote: You

Re: Dynamic listview

2013-05-28 Thread Martin Grigorov
On Tue, May 28, 2013 at 10:51 AM, Martin Makundi martin.maku...@koodaripalvelut.com wrote: 2013/5/28 Martin Grigorov mgrigo...@apache.org: On Tue, May 28, 2013 at 10:41 AM, Martin Makundi martin.maku...@koodaripalvelut.com wrote: You could not use normal form processing, I guess, as

Re: Dynamic listview

2013-05-28 Thread Martin Makundi
Hi! @Martin, Sometimes when wheels at hand are not good enough for a certain terrain you should ask yourself if it it not easier to invent a new one. Only shortsightedness might get one convinced that writing new code is easier than levaraging legacy..eventually ;) [1] [1]

Re: Dynamic listview

2013-05-28 Thread Ernesto Reinaldo Barreiro
Hi Martin, Martin Makundi wants to rebuild the ListView items when the form is submitted. I.e. the form components will be created and then the form processing will proceed. Yes, I understand that. But my point would match the info coming from client with new component tree being created?

Re: Dynamic listview

2013-05-28 Thread Martin Makundi
I look at the code in master branch (7.x) and I guess you still use 1.4.x. In 7.x Form#process() is the first non-final method where you can plug your code. I doubt that 1.4 is different in this area but you can check yourself. Start from Form#onFormSubmitted() and follow the flow. Thanks,

Re: Protection against CSRF (Cross-Site Request Forgery) attacks in Apache Wicket 6

2013-05-28 Thread Magnus K Karlsson
Thanks for your fast reply! I have tested CryptoMapper, but as far as I can see the CryptoMapper does not return unique URL for each session, as suggested by OWASP The synchronizer token pattern requires the generating of random challenge tokens that are associated with the user's current

Re: Dynamic listview

2013-05-28 Thread Martin Makundi
Martin Makundi wants to rebuild the ListView items when the form is submitted. I.e. the form components will be created and then the form processing will proceed. Yes, I understand that. But my point would match the info coming from client with new component tree being created? i.e. will

Re: Dynamic listview

2013-05-28 Thread Martin Grigorov
On Tue, May 28, 2013 at 11:00 AM, Ernesto Reinaldo Barreiro reier...@gmail.com wrote: Hi Martin, Martin Makundi wants to rebuild the ListView items when the form is submitted. I.e. the form components will be created and then the form processing will proceed. Yes, I understand

Re: Protection against CSRF (Cross-Site Request Forgery) attacks in Apache Wicket 6

2013-05-28 Thread Martin Grigorov
On Tue, May 28, 2013 at 11:03 AM, Magnus K Karlsson magnus.r.karls...@gmail.com wrote: Thanks for your fast reply! I have tested CryptoMapper, but as far as I can see the CryptoMapper does not return unique URL for each session, as suggested by OWASP The session id is used to

Re: How to create https link to a page?

2013-05-28 Thread Alexey Mukas
Hi Martin, I've made further investigations and found the problem, it was an order of 'mounting pages' and 'setRootRequestMapper'. If mounting goes first everything works fine (the URL to Loging generated with HTTPS), but if I change the order the URL is generated for HTTP and there is no

Re: Dynamic listview

2013-05-28 Thread Martin Makundi
Ajax update might be tricky, it uses component ids. 2013/5/28 Martin Grigorov mgrigo...@apache.org: On Tue, May 28, 2013 at 11:00 AM, Ernesto Reinaldo Barreiro reier...@gmail.com wrote: Hi Martin, Martin Makundi wants to rebuild the ListView items when the form is submitted. I.e. the

Re: How to create https link to a page?

2013-05-28 Thread Martin Grigorov
Hi Alexey, On Tue, May 28, 2013 at 11:21 AM, Alexey Mukas alexey.mu...@gmail.comwrote: Hi Martin, I've made further investigations and found the problem, it was an order of 'mounting pages' and 'setRootRequestMapper'. If mounting goes first everything works fine (the URL to Loging

Re: Dynamic listview

2013-05-28 Thread Martin Grigorov
On Tue, May 28, 2013 at 11:22 AM, Martin Makundi martin.maku...@koodaripalvelut.com wrote: Ajax update might be tricky, it uses component ids. True. You can override FormComponent#getInputName() to make them stable... 2013/5/28 Martin Grigorov mgrigo...@apache.org: On Tue, May 28, 2013

Re: Dynamic listview

2013-05-28 Thread Martin Makundi
That's quite critical for form component input processing too.. 2013/5/28 Martin Grigorov mgrigo...@apache.org: On Tue, May 28, 2013 at 11:22 AM, Martin Makundi martin.maku...@koodaripalvelut.com wrote: Ajax update might be tricky, it uses component ids. True. You can override

Re: Best way to choose different render

2013-05-28 Thread coincoinfou
h ok ! thank you -- View this message in context: http://apache-wicket.1842946.n4.nabble.com/Best-way-to-choose-different-render-tp4658976p4659101.html Sent from the Users forum mailing list archive at Nabble.com. - To

Re: How to create https link to a page?

2013-05-28 Thread Alexey Mukas
Thanks Martin -- View this message in context: http://apache-wicket.1842946.n4.nabble.com/How-to-create-https-link-to-a-page-tp4659050p4659102.html Sent from the Users forum mailing list archive at Nabble.com. - To

Re: Protection against CSRF (Cross-Site Request Forgery) attacks in Apache Wicket 6

2013-05-28 Thread Martin Grigorov
Hi, Your app fails to start due to: WARN - AbstractLifeCycle - FAILED org.eclipse.jetty.security.ConstraintSecurityHandler@70e434d: java.lang.IllegalStateException: No LoginService for org.eclipse.jetty.security.authentication.FormAuthenticator@c163956 in

Re: Protection against CSRF (Cross-Site Request Forgery) attacks in Apache Wicket 6

2013-05-28 Thread Magnus K Karlsson
i might have solved the problem the default ICryptFactory is /** * Default crypt factory. This factory will instantiate a {@link SunJceCrypt} once and cache it for * all further invocations of {@link #newCrypt()}. * * @author Igor Vaynberg (ivaynberg) */ public class

Session creation with stateless pages in Chrome

2013-05-28 Thread ChambreNoire
Hello folks, I have rendered all of my pre-login wicket pages fully stateless. I have just noticed that while no wicket sessions are created until a valid login occurs using most browsers, when accessing the site via Google Chrome, the wicket session is bound after the initial rendering. As for

Aw: Re: Re: wicket 6 and a confirm dialog

2013-05-28 Thread Marcel Hoerr
Hi Martin, yeah you're right, the onclick solution still works for non-Ajax links. This should be mentionend in the wiki too, i was irritated about the earlier wicket versions paragraph. But the onclick solution with a Behavior (or AttributeModifier) is not working for our Ajax Components

Re: Re: Re: wicket 6 and a confirm dialog

2013-05-28 Thread Martin Grigorov
On Tue, May 28, 2013 at 1:54 PM, Marcel Hoerr marcel.ho...@gmx.de wrote: Hi Martin, yeah you're right, the onclick solution still works for non-Ajax links. This should be mentionend in the wiki too, i was irritated about the earlier wicket versions paragraph. The WIKI is editable by

Re: Session creation with stateless pages in Chrome

2013-05-28 Thread Bas Gooren
Have you checked if Chrome is prefetching other pages (which may be stateful)? Met vriendelijke groet, Kind regards, Bas Gooren Op 28-5-2013 12:14, schreef ChambreNoire: Hello folks, I have rendered all of my pre-login wicket pages fully stateless. I have just noticed that while no wicket

Re: Session creation with stateless pages in Chrome

2013-05-28 Thread ChambreNoire
How would I check this? I disabled Predict network actions to improve page load performance but that hasn't changed anything. Thanks -- View this message in context: http://apache-wicket.1842946.n4.nabble.com/Session-creation-with-stateless-pages-in-Chrome-tp4659106p4659111.html Sent from the

Re: Protection against CSRF (Cross-Site Request Forgery) attacks in Apache Wicket 6

2013-05-28 Thread Magnus K Karlsson
The solution to generate unique URL for each session is to change the default ICryptFactory to KeyInSessionSunJceCryptFactory. getSecuritySettings().setCryptFactory(new KeyInSessionSunJceCryptFactory()); setRootRequestMapper(new CryptoMapper(getRootRequestMapper(), this));

Is it possible to add a static prefix to the generated URL from CryptoMapper?

2013-05-28 Thread Magnus K Karlsson
Hi! I'm successfully testing CryptoMapper in Apache Wicket 6 with unique URL for each Session. But I'm also depending on to be able to define security constaint in the web.xml. security-constraint web-resource-collection web-resource-nameexample-wicket/web-resource-name

Re: Is it possible to add a static prefix to the generated URL from CryptoMapper?

2013-05-28 Thread Martin Grigorov
Hi Magnus, At the moment this doesn't seem to be very easy because #encryptUrl() and #decryptUrl() methods are private.. If they were protected then it would be quite easy to extend the class and provide your own #mapHandler() / #mapRequest() methods which decide themselves what to

Re: Session creation with stateless pages in Chrome

2013-05-28 Thread Bas Gooren
Simply by having a look at your tomcat (or reverse proxy) access log? Of course this is only needed if the page you are hitting has links to other, stateful pages. You can also set a breakpoint in Session.bind() to see when it's called. Met vriendelijke groet, Kind regards, Bas Gooren Op

RE: Re:aj Component twice in markup while ax refresh in Wicket 6.7 (migrated from 1.5.10)

2013-05-28 Thread Heikki Uotinen
Hi, we had similar issue and could not find jira ticket for this, thus created WICKET-5210 with quickstart. Our workaround was changing our jQuery('#someid').. to jQuery('[id=someid]').. to match all same (two) ids. Rgds, Heikki -Original Message- From: Nico

Re: wicketstuff-jasperreports dependency to jasper reports

2013-05-28 Thread Dieter Tremel
Am 28.05.2013 09:39, schrieb Martin Grigorov: You can form wicketstuff/core project and send a pull request with the upgrade. Well, I've made it. With a little luck and lot of horses. ;-) (Silly slogan from a Marlboro cigarette commercial in germany from about 1990)

Re: Re:aj Component twice in markup while ax refresh in Wicket 6.7 (migrated from 1.5.10)

2013-05-28 Thread Maxim Solodovnik
I also saw this behavior using 6.8.0 The component with additional id was replaced, but there was time period when 2 components are present on page On Wed, May 29, 2013 at 12:12 AM, Heikki Uotinen heikki.uoti...@syncrontech.com wrote: Hi, we had similar issue and could not find jira ticket

Re: wicketstuff-jasperreports dependency to jasper reports

2013-05-28 Thread Martin Grigorov
Merged! Danke! On Tue, May 28, 2013 at 9:07 PM, Dieter Tremel tre...@tremel-computer.dewrote: Am 28.05.2013 09:39, schrieb Martin Grigorov: You can form wicketstuff/core project and send a pull request with the upgrade. Well, I've made it. With a little luck and lot of horses. ;-)

ajax submit button not getting latest value

2013-05-28 Thread Taro Fukunaga
Hi, I think I've reported this before but no one else seems to be able to reproduce it. In my app, I was seeing that the value from a field was always null after doing a submit. I went back to the Ajax submit form example that comes with Wicket 6.6 to see if I could reproduce it. I think the