Thank you for your quick replies!

I have been trying to set up a quickstart with wicket version 1.5.2 to test
things out, but it seems like its not totally trivial to set up security
constraints in web.xml using jetty. I tried to add the following to my
web.xml:


    <security-constraint>
        <web-resource-collection>
            <web-resource-name>All resources</web-resource-name>
            <description>Protects all resources</description>
            <url-pattern>/App/*</url-pattern>
        </web-resource-collection>
        <auth-constraint>
            <role-name>USER</role-name>
        </auth-constraint>
    </security-constraint>

    <security-role>
        <role-name>USER</role-name>
    </security-role>

    <login-config>
        <auth-method>BASIC</auth-method>
        <realm-name>App Realm</realm-name>
        <form-login-config>
            <form-login-page>/LoginPage</form-login-page>
            <form-error-page>/LoginErrorPage</form-error-page>
        </form-login-config>
    </login-config>


But that resulted in an error message from jetty:
java.lang.IllegalStateException: No LoginService for
org.eclipse.jetty.security.authentication.BasicAuthenticator@494b6bed in
org.eclipse.jetty.security.ConstraintSecurityHandler@769aba32#STARTING

Seems like you have to add something called "LoginService" to jetty to make
security stuff work. Maybe this is obvious to everyone but I'm not familiar
with jetty at all.

Anyway, if anyone knows what to do I would be very thankful for a pointer in
the right direction.

Thanks for reading!

/Daniel

--
View this message in context: 
http://apache-wicket.1842946.n4.nabble.com/Wrong-path-for-resources-on-redirected-login-page-tp3920038p3923720.html
Sent from the Users forum mailing list archive at Nabble.com.

---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]

Reply via email to