Michael Plöd on Advanced Wicket

Transcript

1. Advanced Wicket Michael Plöd Senacor Technologies AG
2. no wicket introduction
3. Agenda • URLs • Security • Resource Handling • Behaviors
4. HomePage Link(„link“) Image(„pic“) Label(„link_text“) Label(„welcome“)
5. BookmarkablePageLink BookmarkablePageLink link1 = new BookmarkablePageLink("link1", Link1Page.class); link1.add(new Label("label1", model1)); add(link1); PageParameters params = new PageParameters(); pageParameters2.add("key", "value"); BookmarkablePageLink link2 = new BookmarkablePageLink("link2", Link2Page.class, params); link2.add(new Label("label2", model2)); add(link2);
7. @Override protected void init() { ! mountBookmarkablePage("/Link1Page", Link1Page.class); ! mountBookmarkablePage("/Link2Page", Link2Page.class); }
8. URL Strategie /profile?username=mploed QueryStringUrlEncodingStrategy /profile/username/mploed BookmarkablePageRequestTarget UrlCodingStrategy /profile/mploed IndexedParamUrlCodingStrategy /profile/mploed/?tags=kanada MixedParamUrlCodingStrategy /profile/name/mploed HybridUrlCodingStrategy mount(new MixedParamUrlCodingStrategy("profile", UserProfilePage.class, new String[] { "username" }));
9. Link Link link3 = new Link("link3") { @Override ! public void onClick() { ! ! setResponsePage(Link3Page.class); ! } }; Link link4 = new Link("link4") { @Override ! public void onClick() { ! ! setResponsePage(Link4Page.class, pageParameters4); ! } };
11. URL-Syntax /[Application]?wicket:interface= [pageMapName]:[pageId]: [componentPath]:[version]: [interfaceName]: [behaviorId]:[urlDepth]
12. Crypted Urls @Override protected IRequestCycleProcessor newRequestCycleProcessor() { return new WebRequestCycleProcessor() { ! ! @Override ! ! protected IRequestCodingStrategy newRequestCodingStrategy() { ! ! ! return new CryptedUrlWebRequestCodingStrategy( new WebRequestCodingStrategy()); ! } ! }; }
14. Models provide data
15. TextField IModel person. name
16. Detachable Models reduce memory footprint
17. class PersonLoadableDetachableModel extends LoadableDetachableModel<Person> { ! private final long id; ! ! public PersonLoadableDetachableModel(long id) { ! ! this.id = id; ! ! } ! ! @Override ! ! protected Person load() { ! ! ! return userService.retrieve(id); ! ! } } IModel<Person> personModel = new CompoundPropertyModel<Person>( new PersonLoadableDetachableModel(personId)); Model Chaining
18. IApplicationSettings settings = getApplicationSettings(); settings .setAccessDeniedPage(ErrorAccessDeniedPage.class); settings.setPageExpiredErrorPage(StartPage.class); settings.setInternalErrorPage(ErrorInternalPage.class); Error Pages
19. Security by Design • Default-String-Escaping (setEscapeModelStrings) • Model-Binding • Form-Components
20. Wicket Security • Action.RENDER Action.ENABLE • IAuthorizationStrategy #isInstantiationAuthorized #isActionAuthorized
21. Wicket Security • Component #isActionAuthorized(Action) • getSession() #getAuthorizationStrategy() • getApplication() #getSecuritySettings() #getAuthorizationStrategy()
22. Wicket Security Frameworks • Wicket-auth-roles • WASP / SWARM
23. public class AllschoolsWicketApplication extends WicketApplication { @Override protected void init() { super.init(); ... getSecuritySettings().setAuthorizationStrategy( new AllschoolsAuthorizationStrategy()); getSecuritySettings() .setUnauthorizedComponentInstantiationListener( new AllschoolsAuthorizationStrategy()); } Security by hand
24. public class AllschoolsAuthorizationStrategy implements IAuthorizationStrategy, IUnauthorizedComponentInstantiationListener { public boolean isActionAuthorized(Component component, Action action) { if (action.equals(Component.RENDER)) { Class<? extends Component> c = component.getClass(); AdminOnly adminOnly = c.getAnnotation(AdminOnly.class); if (adminOnly != null) { Author user = AllschoolsSession.get().getAuthor(); return user != null; } } return true; } Security by hand
25. ... @SuppressWarnings("unchecked") public boolean isInstantiationAuthorized(Class componentClass) { if (ProtectedPage.class.isAssignableFrom(componentClass)) { ... } } public void onUnauthorizedInstantiation(Component component) { if (AllschoolsSession.get().isAuthenticatedAsAuthor()) { throw new RestartResponseAtInterceptPageException (UnauthorizedAccessPage.class); } else { throw new RestartResponseAtInterceptPageException (SignInPage.class); } } Security by hand
26. Java Panel / Page HTML Properties JavaScript CSS Parts of Components
27. com.senacor.wicket MyComponent.java /resources MyComponent.html MyComponent.properties mystyle.css myscripts.js
28. Header Contributions CSS Java Script
29. public class HomePage extends WebPage { public HomePage(final PageParameters parameters) { add(JavascriptPackageResource .getHeaderContribution(HomePage.class, "myscript.js")); add(CSSPackageResource .getHeaderContribution(HomePage.class, "mystyle.css")); ... } } <wicket:head> <wicket:link> <link href= "mystyle.css" rel="stylesheet" type="text/css"/> ... </wicket:link> </wicket:head>
30. AbstractAjaxBehavior AbstractDefaultAjaxBehavior AbstractAjaxTimer Behavior AbstractAutoComplete Behavior AjaxEventBehavior AbstractSelfUpdating TimerBehavior AutoComplete Behavior AjaxFormComponentUpdating Behavior AjaxFormSubmit Behaivor AjaxFormValidating Behaivor
31. Live Coding example
32. Further Reading Wicket In Action Martijn Dashorst, Eelco Hillenius Manning Wicket Roland Förther, Olaf Siefart, Carl-Eric Menzel dpunkt Verlag
33. Questions? Olaf Siefart Michael Plöd Senacor Technologies AG