Re: OAuth authentication

2022-01-18 Thread Martin Grigorov
Hi,

You could use any OAuth library you like.
The idea is:
- when an unauthenticated user requests a secured page Wicket should
redirect to the login page
- that logic page is not managed by Wicket but by your preferred OAuth
library
- in the callback from the OAuth library you should save the data in your
WebSession, e.g. principal, roles, etc. which you should use later for
authorization

On Wed, Jan 19, 2022 at 12:39 AM Boris Goldowsky 
wrote:

> What is the current best practice for allowing users to sign in to a
> Wicket application using an OAuth2 provider (eg Google account, Twitter,
> Canvas, etc).
>
>   *   Is Apache Shiro a possibility?  Looks like it’s got some Wicket
> integration, but OAuth2 is listed as “coming”.
>   *   PicketLink?
>   *   Something from https://oauth.net/code/java/ ?
>
> Anyone with a working implementation care to give some pointers?
>
> Looks like there may have been some discussion of this 10 years ago on
> this list, but not more recently that I can find.
>
> Thank you!
>
> Boris
>
>


Re: OAuth authentication

2022-01-18 Thread Emond Papegaaij
Hi Boris,

I would go for pac4j-oidc. It does not provide Wicket integration out of
the box, but it is very easy to setup and you only need a few lines of code
to check the authentication. Perhaps @dashorst can share the code:
https://twitter.com/dashorst/status/280001847054336

You can find an example of the pac4j code in a presentation a gave some
time ago:
https://blog.topicus-keyhub.com/oauth-2-0-demystified-j-spring-2019/

Best regards,
Emond

On Tue, Jan 18, 2022 at 11:39 PM Boris Goldowsky 
wrote:

> What is the current best practice for allowing users to sign in to a
> Wicket application using an OAuth2 provider (eg Google account, Twitter,
> Canvas, etc).
>
>   *   Is Apache Shiro a possibility?  Looks like it’s got some Wicket
> integration, but OAuth2 is listed as “coming”.
>   *   PicketLink?
>   *   Something from https://oauth.net/code/java/ ?
>
> Anyone with a working implementation care to give some pointers?
>
> Looks like there may have been some discussion of this 10 years ago on
> this list, but not more recently that I can find.
>
> Thank you!
>
> Boris
>
>


Re: Indicator on IndicatingAjaxButton and IndicatingAjaxLink not working

2022-01-18 Thread Michelle Ee Siew Phing
Ok thanks! Will give that a go.

On Wed, Jan 19, 2022 at 10:04 AM Maxim Solodovnik 
wrote:

> from mobile (sorry for typos ;)
>
>
> On Wed, Jan 19, 2022, 08:29 Michelle Ee Siew Phing <
> michelle...@mcruncher.com> wrote:
>
> > LaddaAjaxButton is only available in Bootstrap 3 (Wicket-Bootstrap
> 4.0.4),
> > we're currently on Bootstrap 4 (Wicket-Bootstrap 5.0.5).
> > So this option is not available to us.
> >
>
> Sorry
> Did quick search on a wrong branch :(
>
> We are on bootstrap5
> And are
> using
> de.agilecoders.wicket.extensions.markup.html.bootstrap.spinner.SpinnerAjaxButton
>
> If I do remember correctly it should work for bootstrap4 as well :)
>
>
> > On Mon, Jan 17, 2022 at 5:39 PM Maxim Solodovnik 
> > wrote:
> >
> > > I would recommend to use
> > >
> > >
> >
> https://github.com/l0rdn1kk0n/wicket-bootstrap/blob/wicket-9.x/bootstrap-extensions/src/main/java/de/agilecoders/wicket/extensions/markup/html/bootstrap/ladda/LaddaAjaxButton.java
> > > works for as
> > >
> > > On Mon, 17 Jan 2022 at 16:33, Michelle Ee Siew Phing
> > >  wrote:
> > > >
> > > > Hi,
> > > >
> > > > Thanks for the information. I have checked the differences between
> the
> > > > provided example and my codes and found the place that is causing the
> > > > problem.
> > > >
> > > > We are using Wicket Bootstrap 5.0.5 with Wicket 9.5.0, and found the
> > > > following in bootstrap.css
> > > >
> > > > [hidden] {
> > > >   display:none !important;
> > > > }
> > > >
> > > > This takes precedence over the display:inline.
> > > >
> > > > Is there a workaround?
> > > > Thanks
> > > >
> > > >
> > > >
> > > > On Mon, Jan 17, 2022 at 3:07 PM Martin Grigorov <
> mgrigo...@apache.org>
> > > > wrote:
> > > >
> > > > > Hi,
> > > > >
> > > > > Please check https://examples9x.wicket.apache.org/ajax/links.
> > > > > The third link demostrates usage of IndicatingAjaxLink.
> > > > > When clicked it adds style="display:inline" and removes "hidden".
> > > > > Its source code could be found at
> > > > >
> > > > >
> > >
> >
> https://github.com/apache/wicket/blob/63c5fe205de1bea293e3b36ca8e0426b343ccafa/wicket-examples/src/main/java/org/apache/wicket/examples/ajax/builtin/LinksPage.java
> > > > > Please compare it with your app!
> > > > > If you are not able to find the problem then please create a mini
> > demo
> > > > > application and share it with us!
> > > > >
> > > > > On Mon, Jan 17, 2022 at 6:08 AM Michelle Ee Siew Phing <
> > > > > michelle...@mcruncher.com> wrote:
> > > > >
> > > > > > Hi,
> > > > > >
> > > > > > I am having issues with the loading icon on the
> > IndicatingAjaxButton
> > > and
> > > > > > IndicatingAjaxLink. Previously I'm on Wicket 9.0.0-M4 and it was
> > > working
> > > > > > fine. But after upgrading to Wicket 9.0.0-M5 (and later
> versions),
> > > I'm
> > > > > not
> > > > > > able to see the loading icon any longer.
> > > > > >
> > > > > > I checked further in the code that the AjaxIndicatorAppender now
> > has
> > > the
> > > > > > hidden attribute instead of the style=display:none. However,
> when I
> > > click
> > > > > > the IndicatingAjaxButton, it will still append the
> > > style=display:inline
> > > > > as
> > > > > > before (but due to the hidden attribute, the icon will not show).
> > > > > >
> > > > > > Is there anything else during the upgrade that I needed for the
> > > > > > IndicatingAjaxButton (and link) to work?
> > > > > > Please advise.
> > > > > >
> > > > > > Thank you. Regards.
> > > > > > Michelle
> > > > > >
> > > > >
> > >
> > >
> > >
> > > --
> > > Best regards,
> > > Maxim
> > >
> > > -
> > > To unsubscribe, e-mail: users-unsubscr...@wicket.apache.org
> > > For additional commands, e-mail: users-h...@wicket.apache.org
> > >
> > >
> >
>


Re: Indicator on IndicatingAjaxButton and IndicatingAjaxLink not working

2022-01-18 Thread Maxim Solodovnik
from mobile (sorry for typos ;)


On Wed, Jan 19, 2022, 08:29 Michelle Ee Siew Phing <
michelle...@mcruncher.com> wrote:

> LaddaAjaxButton is only available in Bootstrap 3 (Wicket-Bootstrap 4.0.4),
> we're currently on Bootstrap 4 (Wicket-Bootstrap 5.0.5).
> So this option is not available to us.
>

Sorry
Did quick search on a wrong branch :(

We are on bootstrap5
And are
using 
de.agilecoders.wicket.extensions.markup.html.bootstrap.spinner.SpinnerAjaxButton

If I do remember correctly it should work for bootstrap4 as well :)


> On Mon, Jan 17, 2022 at 5:39 PM Maxim Solodovnik 
> wrote:
>
> > I would recommend to use
> >
> >
> https://github.com/l0rdn1kk0n/wicket-bootstrap/blob/wicket-9.x/bootstrap-extensions/src/main/java/de/agilecoders/wicket/extensions/markup/html/bootstrap/ladda/LaddaAjaxButton.java
> > works for as
> >
> > On Mon, 17 Jan 2022 at 16:33, Michelle Ee Siew Phing
> >  wrote:
> > >
> > > Hi,
> > >
> > > Thanks for the information. I have checked the differences between the
> > > provided example and my codes and found the place that is causing the
> > > problem.
> > >
> > > We are using Wicket Bootstrap 5.0.5 with Wicket 9.5.0, and found the
> > > following in bootstrap.css
> > >
> > > [hidden] {
> > >   display:none !important;
> > > }
> > >
> > > This takes precedence over the display:inline.
> > >
> > > Is there a workaround?
> > > Thanks
> > >
> > >
> > >
> > > On Mon, Jan 17, 2022 at 3:07 PM Martin Grigorov 
> > > wrote:
> > >
> > > > Hi,
> > > >
> > > > Please check https://examples9x.wicket.apache.org/ajax/links.
> > > > The third link demostrates usage of IndicatingAjaxLink.
> > > > When clicked it adds style="display:inline" and removes "hidden".
> > > > Its source code could be found at
> > > >
> > > >
> >
> https://github.com/apache/wicket/blob/63c5fe205de1bea293e3b36ca8e0426b343ccafa/wicket-examples/src/main/java/org/apache/wicket/examples/ajax/builtin/LinksPage.java
> > > > Please compare it with your app!
> > > > If you are not able to find the problem then please create a mini
> demo
> > > > application and share it with us!
> > > >
> > > > On Mon, Jan 17, 2022 at 6:08 AM Michelle Ee Siew Phing <
> > > > michelle...@mcruncher.com> wrote:
> > > >
> > > > > Hi,
> > > > >
> > > > > I am having issues with the loading icon on the
> IndicatingAjaxButton
> > and
> > > > > IndicatingAjaxLink. Previously I'm on Wicket 9.0.0-M4 and it was
> > working
> > > > > fine. But after upgrading to Wicket 9.0.0-M5 (and later versions),
> > I'm
> > > > not
> > > > > able to see the loading icon any longer.
> > > > >
> > > > > I checked further in the code that the AjaxIndicatorAppender now
> has
> > the
> > > > > hidden attribute instead of the style=display:none. However, when I
> > click
> > > > > the IndicatingAjaxButton, it will still append the
> > style=display:inline
> > > > as
> > > > > before (but due to the hidden attribute, the icon will not show).
> > > > >
> > > > > Is there anything else during the upgrade that I needed for the
> > > > > IndicatingAjaxButton (and link) to work?
> > > > > Please advise.
> > > > >
> > > > > Thank you. Regards.
> > > > > Michelle
> > > > >
> > > >
> >
> >
> >
> > --
> > Best regards,
> > Maxim
> >
> > -
> > To unsubscribe, e-mail: users-unsubscr...@wicket.apache.org
> > For additional commands, e-mail: users-h...@wicket.apache.org
> >
> >
>


Re: Indicator on IndicatingAjaxButton and IndicatingAjaxLink not working

2022-01-18 Thread Michelle Ee Siew Phing
LaddaAjaxButton is only available in Bootstrap 3 (Wicket-Bootstrap 4.0.4),
we're currently on Bootstrap 4 (Wicket-Bootstrap 5.0.5).
So this option is not available to us.

On Mon, Jan 17, 2022 at 5:39 PM Maxim Solodovnik 
wrote:

> I would recommend to use
>
> https://github.com/l0rdn1kk0n/wicket-bootstrap/blob/wicket-9.x/bootstrap-extensions/src/main/java/de/agilecoders/wicket/extensions/markup/html/bootstrap/ladda/LaddaAjaxButton.java
> works for as
>
> On Mon, 17 Jan 2022 at 16:33, Michelle Ee Siew Phing
>  wrote:
> >
> > Hi,
> >
> > Thanks for the information. I have checked the differences between the
> > provided example and my codes and found the place that is causing the
> > problem.
> >
> > We are using Wicket Bootstrap 5.0.5 with Wicket 9.5.0, and found the
> > following in bootstrap.css
> >
> > [hidden] {
> >   display:none !important;
> > }
> >
> > This takes precedence over the display:inline.
> >
> > Is there a workaround?
> > Thanks
> >
> >
> >
> > On Mon, Jan 17, 2022 at 3:07 PM Martin Grigorov 
> > wrote:
> >
> > > Hi,
> > >
> > > Please check https://examples9x.wicket.apache.org/ajax/links.
> > > The third link demostrates usage of IndicatingAjaxLink.
> > > When clicked it adds style="display:inline" and removes "hidden".
> > > Its source code could be found at
> > >
> > >
> https://github.com/apache/wicket/blob/63c5fe205de1bea293e3b36ca8e0426b343ccafa/wicket-examples/src/main/java/org/apache/wicket/examples/ajax/builtin/LinksPage.java
> > > Please compare it with your app!
> > > If you are not able to find the problem then please create a mini demo
> > > application and share it with us!
> > >
> > > On Mon, Jan 17, 2022 at 6:08 AM Michelle Ee Siew Phing <
> > > michelle...@mcruncher.com> wrote:
> > >
> > > > Hi,
> > > >
> > > > I am having issues with the loading icon on the IndicatingAjaxButton
> and
> > > > IndicatingAjaxLink. Previously I'm on Wicket 9.0.0-M4 and it was
> working
> > > > fine. But after upgrading to Wicket 9.0.0-M5 (and later versions),
> I'm
> > > not
> > > > able to see the loading icon any longer.
> > > >
> > > > I checked further in the code that the AjaxIndicatorAppender now has
> the
> > > > hidden attribute instead of the style=display:none. However, when I
> click
> > > > the IndicatingAjaxButton, it will still append the
> style=display:inline
> > > as
> > > > before (but due to the hidden attribute, the icon will not show).
> > > >
> > > > Is there anything else during the upgrade that I needed for the
> > > > IndicatingAjaxButton (and link) to work?
> > > > Please advise.
> > > >
> > > > Thank you. Regards.
> > > > Michelle
> > > >
> > >
>
>
>
> --
> Best regards,
> Maxim
>
> -
> To unsubscribe, e-mail: users-unsubscr...@wicket.apache.org
> For additional commands, e-mail: users-h...@wicket.apache.org
>
>


Re: OAuth authentication

2022-01-18 Thread Shengche Hsiao
Hello, I’m using 
https://bitbucket.org/connect2id/oauth-2.0-sdk-with-openid-connect-extensions 
to implement OpenID Connect and OAuth 2 providers and consume oauth2 protected 
resource in Wicket project

From: Boris Goldowsky 
Date: Wednesday, January 19, 2022 at 06:39
To: users@wicket.apache.org 
Subject: OAuth authentication
What is the current best practice for allowing users to sign in to a Wicket 
application using an OAuth2 provider (eg Google account, Twitter, Canvas, etc).

  *   Is Apache Shiro a possibility?  Looks like it’s got some Wicket 
integration, but OAuth2 is listed as “coming”.
  *   PicketLink?
  *   Something from https://oauth.net/code/java/ ?

Anyone with a working implementation care to give some pointers?

Looks like there may have been some discussion of this 10 years ago on this 
list, but not more recently that I can find.

Thank you!

Boris


OAuth authentication

2022-01-18 Thread Boris Goldowsky
What is the current best practice for allowing users to sign in to a Wicket 
application using an OAuth2 provider (eg Google account, Twitter, Canvas, etc).

  *   Is Apache Shiro a possibility?  Looks like it’s got some Wicket 
integration, but OAuth2 is listed as “coming”.
  *   PicketLink?
  *   Something from https://oauth.net/code/java/ ?

Anyone with a working implementation care to give some pointers?

Looks like there may have been some discussion of this 10 years ago on this 
list, but not more recently that I can find.

Thank you!

Boris