Re: Wicket / OAuth2

2014-09-02 Thread Martin Grigorov
Hi Sebastien, What exactly do you need ? I have used https://github.com/fernandezpablo85/scribe-java to create Authenticate with Xyz buttons for signing in (e.g. with Facebook, Twitter and LinkedIn). The developer of Scribe doesn't like OAuth2 (as many other developers) and at some point he

Re: Wicket / OAuth2

2014-09-02 Thread Patrick Davids
Hi Sebastien, did you have a look at Apache Shiro? http://shiro.apache.org/integration.html There is a OAuth link... but I did not look deeper... And what I additionally have found seems to be in progress. https://issues.apache.org/jira/browse/SHIRO-119 kind regards Patrick Brown Am

Re: Wicket / OAuth2

2014-09-02 Thread Martin Grigorov
Hi, Apache Shiro seems to be in a very bad state at the moment. There is no active development in the last year and its dev@ list is very quite - no one responds to users' questions like Is Shiro still alive? Martin Grigorov Wicket Training and Consulting https://twitter.com/mtgrigorov On Tue,

Re: Wicket / OAuth2

2014-09-02 Thread Sebastien
Hi Martin, The question is not much about having a signin button to authenticate the user but more how to make it work with AuthenticatedWebApplication (or a custom OAuthWebApplication for instance). The final goal is to keep IRoleCheckingStrategy working ie: the user access an

Re: Wicket / OAuth2

2014-09-02 Thread Patrick Davids
Is Shiro still alive? I hope so... just used it google-guice integrated. But, by the way... if not alive... any alternatives to shiro? Patrick Am 02.09.2014 11:42, schrieb Martin Grigorov: Hi, Apache Shiro seems to be in a very bad state at the moment. There is no active development in

Re: Wicket / OAuth2

2014-09-02 Thread Martin Grigorov
Hi Sebastien, The button is just a UI. But the idea is the same. The difference is that the OAuth provider is rather an authentication service than an authorization one. Usually the user of some social network doesn't want to share his details with random apps (like yours and mine). So when you

Re: Wicket / OAuth2

2014-09-02 Thread Guillaume Smet
Hi, We use Spring Security for Artifact Listener but I think the general principle should be the same: https://github.com/openwide-java/artifact-listener/ and you might find it interesting to see how we did it. Martin already mentioned it earlier but we use pac4j for OpenId/OAuth/whatever. --

Re: Wicket / OAuth2

2014-09-02 Thread Martin Grigorov
On Tue, Sep 2, 2014 at 12:49 PM, Patrick Davids patrick.dav...@nubologic.com wrote: Is Shiro still alive? I hope so... just used it google-guice integrated. I also hope so. It is a nice product and there are not many alternatives. The only commit in the last few months was by Les

Re: Wicket / OAuth2

2014-09-02 Thread Sebastien
Hi Martin, but I think the authorization part is left to the application. Absolutely. Actually the OAuth service is specific to the company I'm working for, it's just a authentication system (based on our central directory) and there is no data the user can choose to share or not. Roles are then

Re: Wicket / OAuth2

2014-09-02 Thread Martin Grigorov
On Tue, Sep 2, 2014 at 3:04 PM, Sebastien seb...@gmail.com wrote: Hi Martin, but I think the authorization part is left to the application. Absolutely. Actually the OAuth service is specific to the company I'm working for, it's just a authentication system (based on our central directory)

Wicket / OAuth2

2014-09-01 Thread Sebastien
Hi all, AFAIS, there is nothing about a OAuth2 client in Wicket out-of-the-box or through a satellite project... Does somebody knows a *simple* solution for integrating OAuth2 into Wicket (like a OAuthWebApplication, or maybe a ready-to-use Filter, just giving Consumer Key, Consumer Secret