Errai 2.0beta1 CDI: RequireAuthentication or RequireRoles

[lau_bakman]

Hi

I have just started on a project where we are trying to use Errai service bus and possibly CDI. We are currently in an investigation/experimentation phase and

in that context we are looking at how to handle security.

To provide some context information: We are using Errai 2.0beta one on Jetty and we have created our test projects using the maven archetypes. Other than that we are fairly new

to Errai.

So far we have found the RequireAuthentication and RequireRoles annotaions and they seem to work as expected when using Errai without CDI but as soon

as we enable CDI the annotations no longer have any effect.

So far I can see that the ServiceProcessor is never executed (which I believe is by design) but is it intentional that the security annotations no longer work?

Can you point me to any resources explaining how to use security in Errai CDI - possibly if this is not yet implemented in the beta and is to be released at a later date.

I am sure I must be missing something, just can't figure out what it is :-)

Regards

Lau bakman

[cbrock]

Unfortunately, this is true. If you want to use CDI -- a good idea IMO -- I would consider looking at something like Seam Security to provide your security. When working with CDI, Errai completely relegates responsibility for that stuff to the container. Thus, we do not provide our own security framework when working with CDI. Which is fine, because when working with CDI, Errai is merely an extension to the CDI container, and thus its components will be bound by whatever restrictions you put on them.

Mike

[lau_bakman]

Hi

Thank you for your answer, I will take a look at Seam Security.

Regards

Lau Bakman