Errai and form based authentication / j_security_check

[ponnuki]

Hi,

is it possible to implement form based authentication using j_security_check with Errai mechanism only? Has someone done this already? I don't want to use a JSP or HTML as login page because I need to call Errai services to display contents on the login page.

Thanks for your help

Tobias

[edewit]

Hi Tobias,

The problem with the authentication with the j_security_check is that it's meant to be used in a 'classic' page based application and therfore not very useful with GWT. What you could do is 'hack' something like described in this post: http://codepimpsdotorg.blogspot.ch/2008/07/gwt-jsecuritycheck.html but I would recommend not using the j_security_check mechanism.

Cheers,

     Erik Jan

[ponnuki]

Thanks for your quick reply Erik Jan.

What is the recommended way to secure an Errai application? A custom implementation based on RPC?

[edewit]

Hi Tobias,

We are currently working on a security module that is integrated with picketlink, but that is in a very alpha state https://github.com/edewit/errai/compare/security you could try that, or integrate yourself with some security framework picketlink or apache shiro I can recomend hope that helps.

Cheers,

     Erik Jan