Sunday, June 10, 2007

Acegi and Wicket-auth-roles

clipped from
Apache Wicket
Acegi and Wicket-auth-roles

Why use Acegi?

Complete example

The example below shows how you can use Acegi in combination with Wicket-auth-roles. Acegi takes care of the authentication, Wicket-auth-roles does authorization. By this I mean that Acegi looks up the user (including roles, full name, etc.), validates the password, and keeps track of the logged on user in the current session. Wicket-auth-roles validates that the current user (can be none as well) has access to a particular page, or even a particular component.