Raible Designs

Using Acegi Security for Remember Me and SSL Switching

I spent some time yesterday converting AppFuse's homegrown Remember Me and SSL Switching system to using Acegi Security. Thanks to Justin Spears, who provided the original motivation. It was much easier than I thought it would be, and resulted in the deleting of 7 classes in AppFuse. Not only that, but only one of them had a test for it, so the test coverage has naturally gone up as well. I'll trade 40 lines of XML for 1214 lines of Java any day - especially when I can get the support of an open-source framework.

If you're interested in using this code over 1.8.2, you can checkout the latest code from CVS (or download it from http://appfuse.org/nightly). The only other change currently in CVS is changing from "tomcat" to "user" as the default User role. Below is a list of classes that were removed as part of this move to Acegi:

• src/dao/org/appfuse/model/UserCookie.java
• src/service/org/appfuse/util/RandomGUID.java
• src/web/org/appfuse/webapp/action/LoginServlet.java
• src/web/org/appfuse/webapp/filter/LoginFilter.java
• src/web/org/appfuse/webapp/taglib/SecureTag.java
• src/web/org/appfuse/webapp/util/SslUtil.java
• test/web/org/appfuse/webapp/action/LoginServletTest.java

I should also mention that I owe a big thanks to Virtuas - who pays me to work on AppFuse these days.

Happy Birthday Jack!

Happy Birthday Jack!! It's hard to believe it's been a whole year since Jack was born. He's quite a guy to hang out with now - he's walking, laughing and smiling like you wouldn't believe. He always wakes up with a smile on his face too - quite the opposite of his big sister.

I'd post a recent picture, but I killed my PowerBook last week, where all our pictures are stored. In the meantime, here's a video of him walking from last week.

[ANN] AppFuse 1.8.2 Released

This release is mostly a bug fix release with no new features. It also includes upgrades to Acegi Security and the Spring Framework. Thanks to all the sponsors who have contributed products and free hosting to the AppFuse project.

• Download
• Release Notes
• Learn more about AppFuse

To see how AppFuse works, please see the following demos:

• Demo of Features in Flash
• Struts + Spring + Hibernate
• Spring + iBATIS
• WebWork + Spring + Hibernate
• JSF + Spring + Hibernate
• Tapestry + Spring + Hibernate

Comments and issues can be sent to the mailing list or posted to the AppFuse Issue Tracker.

P.S. I have the Acegi integration done for Remember Me and SSL Switching in another project, so that support should be in CVS sometime next week. Thanks to Justin Spears for his help on this issue.

PowerBook Dent

A fair amount of PowerBook owners I know have corner dings in their laptops. It usually comes from dropping it in a parking lot or something similar. I've managed to escape this problem for a number of years now. Until today. I'm writing this post on my PowerBook, but my hard drive is currently my iPod because I can't boot up off the regular hard drive. I'm heading to the Apple Store in short order to see if they can fix the hard drive.

At least I have a decent story behind it. I was riding my bike downtown today, and while riding off the curb onto Larimer street - I popped a wheelie. I had too much oomph - and the front wheel started to head for the sky. Normally when this happens, you hop off the back of the bike and you're good to go. Not today, my shoes wouldn't snap out of my pedals - so WHAM, splat, boom. I hit the pavement like Whiley Coyote off a cliff. Right in the middle of the street too - good thing no cars were coming. Most of my left side hurt like a mother and my left elbow has some nice road rash - but nothing out of the ordinary from a bike wreck.

After riding off with stars in my eyes, I headed to Chipotle for lunch. After lunch, I broke out my laptop to work on Spring Live. When I pulled it out, I noticed the left-corner dent and thought, "Not bad, could have been a lot worse." Moments later, all my open applications froze up. When I tried to reboot, I got the blue Mac folder with the ? on it. In other words, "I can't find your hard drive." And so another PowerBook repair adventure begins...

Google is helping developers make more money

From Relax, Bill Gates; It's Google's Turn as the Villain:

Google, Mr. Hoffman said, has caused "across the board a 25 to 50 percent salary inflation for engineers in Silicon Valley" - or at least those in a position to weigh competing offers. A sought-after computer programmer can now expect to make more than $150,000 a year.

Thanks Google - we appreciate the inflation.

Using CruiseControl with Subversion

This morning, I had the pleasure of setting up an AppFuse-based project to run under CruiseControl. Normally, this is very easy to do because I have the CruiseControl setup files and instructions. However, this project uses Subversion instead of CVS. Luckily, Subversion is easy to use and I was able to modify things to work quite easily. Below are the steps you can take to modify your AppFuse project to run under CruiseControl and Subversion.

• Download svant and extract it to your work directory.
• In build.xml, change your "cvs" target to "svn" and change the tasks appropriately.
  
  

      <path id="svn.classpath">
          <fileset dir="svnant-1.0.0-rc1/lib" includes="*.jar"/>
      </path>
          
      <taskdef resource="svntask.properties" classpathref="svn.classpath"/>
      
      <target name="svn">
          <delete dir="checkout/appfuse"/>
          <svn>
              <checkout url="https://svn.java.net/svn/appfuse/trunk" 
                  revision="HEAD" destPath="checkout/appfuse" />
          </svn>
      </target>
  

• Modify the "test" target in build.xml to depend on "svn".
• In config.xml, change the <modificationset> to be <svn LocalWorkingCopy="/home/cc/work/checkout/appfuse"/> instead of the <cvs> equivalent.

The instructions have been documented on the wiki and checked into AppFuse's CVS.

A List Apart 4.0

I've always enjoyed A List Apart, so it's great to see they've got so much new stuff:

New design. New structure. New server. New publishing system powered by Ruby on Rails. As the dog days of summer draw to a close, we present A List Apart 4.0. So buy a tee shirt already.

Beautiful, just beautiful.

What do you want to see at Java in Action?

I'm presenting two sessions at Java in Action in October. The first one is a 3-hour tutorial on Comparing Java Web Frameworks, while the second is about Developing Next Generation Web Applications with Ajax in Spring. I'm in the process of writing both of these, and I'm interested to see what Java developers would like to see in these talks.

The tutorial is probably the toughest one because my normal presentation usually only takes about an hour to deliver. For a similar presentation, see Craig McClanahan's The Evolution of Web Application Architectures. I could talk about the history like Craig does, or I could talk about the different frameworks and their features like I usually do. However, I want something more interactive and fun for attendees. I was thinking of live-coding for 20 minutes with each framework, and showing the differences, but that's not a whole lot of fun either. Maybe I could divide the class into 5 groups, educate each of them on features of the framework, and then we could have some sort of debate? Showing code is always something that developers are interested in, so I'll have to figure out how to work that in as well. If you're planning on attending this tutorial - I'd love to hear suggestions.

I'm also curious on what you'd like to see in the 2nd presentation? I was planning on using Equinox (or possibly AppFuse), to show how to use DWR, Prototype and script.aculo.us. A couple of examples I'm thinking of showing are in-page updates and sortable/pageable tables. Any other cool effects or tricks you'd like to see?

Sorry for the cross-post from JRoller, but I wanted to reach the largest possible audience. Please leave comments on the JRoller entry.

Hiking at Red Rocks

Prettying up JSPWiki's URLs

Recently, AppFuse user Charlse Li sent me an e-mail with a "PostfixURLConstructor" class designed to pretty up JSPWiki's URL. With the patch he sent, I was able to change URLs from /wiki/Wiki.jsp?page=AppFuse to /wiki/AppFuse.html. Applying the patch was quite easy, but maintaining backwards compatibility and security required a little more work. Below are the steps I went through to get everything working properly:

• Download postfixurlconstructor.zip and extract to your hard-drive. Copy the "com" directory to your wiki/WEB-INF/classes directory.
• Change the <url-pattern> of the WikiServlet in web.xml from /wiki/* to *.html.
• Add the following two lines to your WEB-INF/jspwiki.properties file:
  
  jspwiki.urlConstructor = PostfixURLConstructor
jspwiki.PostfixURLConstructor.postfix = .html

This is all you need to do to change the default URL schema. However, if you're like me and you've had a JSPWiki instance setup for awhile, you'll need to maintain backwards-compatibility. I wanted to make sure the old URLs mapped to the new ones. In addition, the "edit URL" changed from Edit.jsp?page=PageName to pageName.html?do=Edit. Since web.xml and <security-constraint> can't contain regular expressions, I used the ultra-cool UrlRewriteFilter to solve both issues. Here's the steps I went through to configure it properly:

• Download UrlRewriteFilter 2.5.1 and extract the JAR to your WEB-INF/lib directory.
• Change your web.xml to use a 2.3 DTD instead of a 2.2 DTD and add the filter and filter-mapping to web.xml.
• Create a WEB-INF/urlrewrite.xml file with the following contents:

<?xml version="1.0" encoding="utf-8"?>
<!DOCENGINE urlrewrite PUBLIC "-//tuckey.org//DTD UrlRewrite 2.5//EN"
    "http://tuckey.org/res/dtds/urlrewrite2.5.dtd">

<urlrewrite>
    <rule>
        <from>^/Wiki.jsp\?page=(.*)$</from>
        <to type="redirect">$1.html</to>
    </rule>

    <rule>
        <from>^/(.*).html\?do=Edit$</from>
        <to type="redirect">Edit.jsp?page=$1</to>
    </rule>
</urlrewrite>

That's it - restart your server and you should be good to go. Thanks for the patch and instructions Charlse!

Update: There does seem to be a couple of issues. The 1st is that none of the attachments are resolving correctly (example). The 2nd that when I try to edit a page, it always shows up with the Main page's text. I'm not going to back out the change just yet, but I will if I can't fix it in the next several hours.

Update 2: I ended up backing out this change, but left in a forward from *.html to Wiki.jsp?page=$1 so all URLs in this post should still work. The "not being able to edit" was the major reason I rolled back to the old URL schema. The attachment issue seems to be related to my browser's cache. Clearing it fixed the problem.