Java Room

Injected Seam Component is NULL in EntityQuery

noreply@blogger.com (Lee) — Tue, 26 Jan 2010 23:32:50 PST

After read through the Seam Reference, I found there bijection is not allowed if the Seam component's instance is used outside of the Seam context. Seam performs injection by intercepting method call. Since I call the injected component in the query class constructor, Seam will not intercept the call and inject the value.

ERROR!!
------------

@BypassInterceptors
@Name("userTaskList")
public class UserTaskList extends EntityQuery {

@In(required=true)
private User authenticatedUser;

public UserTaskList() {

//authenticatedUser is NULL
System.out.println("authenticatedUser = "+authenticatedUser);

StringBuffer ejbql = new StringBuffer("SELECT task FROM Task task WHERE task.role IN ");
ejbql.append("(SELECT a.role FROM AssignRole a WHERE a.user.userId=#{authenticatedUser.userId})");

setEjbql(ejbql.toString());
setMaxResults(25);
}

@Factory(value="taskList", scope=ScopeType.EVENT)
public List&ltTask> getTaskList(){

return super.getResultList();
}
}

The "authenticatedUser" in UserTaskList() constructor is returned NULL.
To solve this issue, I moved the EJB-QL to the getTaskList() method.

SOLUTION:
------------------

@BypassInterceptors
@Name("userTaskList")
public class UserTaskList extends EntityQuery {

@In(required=true)
private User authenticatedUser;

private static final String EJBQL = "SELECT task FROM Task task";

public UserTaskList() {
//authenticatedUser is NULL
System.out.println("authenticatedUser = "+authenticatedUser);
setEjbql(EJBQL);
setMaxResults(25);
}

@Factory(value="taskList", scope=ScopeType.EVENT)
public List&ltTask> getTaskList(){

//authenticatedUser is NOT NULL
System.out.println("authenticatedUser = "+authenticatedUser);

StringBuffer ejbql = new StringBuffer("SELECT task FROM Task task WHERE task.role IN ");
ejbql.append("(SELECT a.role FROM AssignRole a WHERE a.user.userId=#{authenticatedUser.userId})");

setEjbql(ejbql.toString());

List&ltTask> list = super.getResultList();

return list;
}
}

Using "IN" clause in EJB-QL

noreply@blogger.com (Lee) — Tue, 26 Jan 2010 23:16:50 PST

In the below example, the query return NO results. The EJB-QL cannot understand multiple input parameters.

ERROR!!
------------
String ejbql = "SELECT task FROM Task task WHERE task.role IN (:=roles)";

Query query = entityManager.createQuery(ejbql);
query.setParameter("roles", "'admin', 'user'");

List&ltTask> list = query.getResultList();

However,....if I using example below, the query return ResultList I want.

@In(required=true)
private User authenticatedUser;

String roles = authenticatedUser.getRoles(); // roles="'admin', 'user'"
String ejbql = "SELECT task FROM Task task WHERE task.role IN ("+roles+")";

Query query = entityManager.createQuery(ejbql);
List&ltTask> list = query.getResultList();

But, this is not the correct way to implement query in EntityQuery class.
And, finally I came out another workaround, which looks more reasonable. I am not sure this is the right way to set the EJB-QL in EntityQuery, I will appreciate if someone can provide better solution for me.

SOLUTION:
-----------------

@In(required=true)
private User authenticatedUser;

public List&ltTask> getTaskList(){

StringBuffer ejbql = new StringBuffer("SELECT task FROM Task task WHERE task.role IN ");
ejbql.append("(SELECT a.role FROM AssignRole a WHERE a.user.userId=:userId)");

Query query = entityManager.createQuery(ejbql.toString());
query.setParameter("userId", authenticatedUser.getUserId());

List&ltTask> list = query.getResultList();
return list;
}

Unique Key Validation

noreply@blogger.com (Lee) — Wed, 20 Jan 2010 22:08:46 PST

@UniqueConstraint Annotation does not validate the value of entity field. It will not catch the org.hibernate.exception.ConstraintViolationException.

Example:
@Table(name = "user", uniqueConstraints = @UniqueConstraint(columnNames = "username"))

Error:
ERROR [AbstractFlushingEventListener] Could not synchronize database state with session org.hibernate.exception.ConstraintViolationException: Could not execute JDBC batch update...

SOLUTION: Custom Validator
----------------------------------------
To solve this problem, I created a custom validator to do the validation in JSF before persist the entity.
Seam provides annotations to allow us to use Seam components as JSF converters and validators.

@Name("usernameValidator")
@BypassInterceptors
@org.jboss.seam.annotations.faces.Validator
public class UsernameValidator implements javax.faces.validator.Validator {

public static final String VERIFICATION_MSG_EXPR = "#{messages['validator.duplicateError']}";

public void validate(FacesContext context, UIComponent cmp, Object value)throws ValidatorException
{

String ejbql = "select u from User u where u.username=:username";

String username = (String)value;

EntityManager em = (EntityManager) Component.getInstance("entityManager");
Query query = em.createQuery(ejbql);
query.setParameter("username", username);

List list = query.getResultList();

if (!list.isEmpty()) {

FacesMessage msg = new FacesMessage();
msg.setSummary(Interpolator.instance().interpolate(VERIFICATION_MSG_EXPR));
msg.setSeverity(FacesMessage.SEVERITY_WARN);
throw new ValidatorException(msg);
}
}
}

In JSF:

Registers the Seam component as a JSF validator. Below example is a validator which injects another Seam component. The injected component is used to validate the value.

<h:inputText id="username" value="#{userHome.instance.username}" validator="usernameValidator"/>

Seam and Drools integration in jBPM

noreply@blogger.com (Lee) — Thu, 07 Jan 2010 23:15:23 PST

Recently I am developing a workflow collaboration system which will using JBoss Rules in jBPM process definition. The example below is documented during my testing and understanding of Drools integration with jBPM in Seam Framework.

Step 1: Add jbpm.cfg.xml and hibernate.cfg.xml config files

Since we have business process definitions, we need to provide jBPM configuration,
and Hibernate configuration for jBPM.

<jbpm-configuration>
<jbpm-context>
<service name="persistence">
<factory>
<bean class="org.jbpm.persistence.db.DbPersistenceServiceFactory">
<field name="isTransactionEnabled"><false/></field>
</bean>
</factory>
</service>
<service name="tx" factory="org.jbpm.tx.TxServiceFactory" />
<service name="message" factory="org.jbpm.msg.db.DbMessageServiceFactory" />
<service name="scheduler" factory="org.jbpm.scheduler.db.DbSchedulerServiceFactory" />
<service name="logging" factory="org.jbpm.logging.db.DbLoggingServiceFactory" />
<service name="authentication"
factory="org.jbpm.security.authentication.DefaultAuthenticationServiceFactory" />
</jbpm-context>
</jbpm-configuration>

**NOTE:
jBPM transaction control is disabled in the jbpm.cfg.xml.
Seam or EJB3 should control the JTA transactions.

Step 2: Configure components.xml

(1) Create org.drools.RuleBase instance available in a Seam context variable.
(2) Define where to find the business process definitions.

<drools:rule-base name="ruleBase" rule-files="test.drl"/>
<drools:managed-working-memory name="workingMemory" rule-base="#{ruleBase}"/>

<bpm:jbpm>
<bpm:process-definitions>
<value>test.jpdl.xml</value>
</bpm:process-definitions>
</bpm:jbpm>

Step 3: Create Business Process Definition File - test.jpdl.xml

<?xml version="1.0"?>
<process-definition name="approval_process"
xmlns="urn:jbpm.org:jpdl-3.2"
xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
xsi:schemaLocation="urn:jbpm.org:jpdl-3.2 http://jbpm.org/xsd/jpdl-3.2.xsd">

<start-state name="start">
<transition to="checkName"/>
</start-state>

<decision name="checkName">
<handler class="org.jboss.seam.drools.DroolsDecisionHandler">
<workingMemoryName>workingMemory</workingMemoryName>
<assertObjects>
<element>#{approval}</element>
</assertObjects>
</handler>

<transition name="process" to="processNode"/> 
<transition name="reject" to="reject_done"/> 
</decision>

<task-node name="processNode">
<task name="Process Approval" description="process approval">
<assignment actor-id="admin"/>
</task>
<transition name="approve" to="approve_done"/>
<transition name="reject" to="reject_done"/>
</task-node>

<end-state name="approve_done"/>
<end-state name="reject_done"/> 
</process-definition>

Step 4: Create Drools File - test.drl

Below is a simple example to check whether 'name' and 'description' are equal.

package test;
import org.jboss.seam.drools.Decision

global Decision decision
global String name;

rule Process
when
Approval(name==description)
then
decision.setOutcome("process");
end

rule Deny
when
Approval(name!=description)
then
decision.setOutcome("reject");
end

Step 5: Create POJO Process Manager

package test;
import org.jboss.seam.annotations.Name;
import org.jboss.seam.annotations.bpm.StartTask;
import org.jboss.seam.annotations.bpm.BeginTask;
import org.jboss.seam.annotations.bpm.Transition;
import org.jboss.seam.annotations.bpm.CreateProcess;
import org.jboss.seam.annotations.bpm.EndTask;

@Name("approval")
public class Approval
{

private String name;
private String description;

public void setName(String name){
this.name = name;
}

public String getName(){
return name;
}

public void setDescription(String description) {
}

public String getDescription(){
return description;
}

@CreateProcess(definition="approval_process")
public void startProcess() {
}

@StartTask
@EndTask(transition="approve")
public void approve() {
System.out.println("process APPROVE ...");
}

@StartTask
@EndTask(transition="reject")
public void reject() {
System.out.println("process REJECT ...");
}
}

Note:

(1) Use the @CreateProcess annotation to initiate a business process instance.

@CreateProcess(definition="approval_process")
public void startProcess() {
.....
}

(2) To begin work on a task, use either @StartTask or @BeginTask

@StartTask
public String start() {
...
}

(3) To end the conversation use @EndTask

@EndTask(transition="approve")
public String approve() {
...
}

**REMARK:
Without @StartTask, in seam, "Task null not found" exception will be thrown.

Step 6: The View Component

<!DOCTYPE composition PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
"http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<ui:composition xmlns="http://www.w3.org/1999/xhtml"
xmlns:s="http://jboss.com/products/seam/taglib"
xmlns:ui="http://java.sun.com/jsf/facelets"
xmlns:f="http://java.sun.com/jsf/core"
xmlns:h="http://java.sun.com/jsf/html"
template="layout/template.xhtml">

<ui:define name="body">

<h:form id="list">
<div>
<h:outputText id="noItems" value="There are no items." rendered="#{empty taskInstancePriorityList}"/>
<h:dataTable id="items" value="#{taskInstancePriorityList}" var="task" rendered="#{not empty taskInstancePriorityList}">
<h:column>
<f:facet name="header">
<h:outputText value="Description"/>
</f:facet>
<h:inputText id="description" value="#{task.description}" style="width: 400"/>
</h:column>
<h:column>
<f:facet name="header">
<h:outputText value="Created"/>
</f:facet>
<h:outputText value="#{task.taskMgmtInstance.processInstance.start}">
<s:convertDateTime type="date"/>
</h:outputText>
</h:column>
<h:column>
<f:facet name="header">
<h:outputText value="Priority"/>
</f:facet>
<h:inputText id="priority" value="#{task.priority}" style="width: 30"/>
</h:column>
<h:column>
<f:facet name="header">
<h:outputText value="Due Date"/>
</f:facet>
<h:inputText id="dueDate" value="#{task.dueDate}" style="width: 100">
<s:convertDateTime type="date" dateStyle="short"/>
</h:inputText>
</h:column>
<h:column>
<s:button id="approve" action="#{approval.approve}" taskInstance="#{task}" value="Approve"/>
<s:button id="reject" action="#{approval.reject}" taskInstance="#{task}" value="Reject"/>
</h:column>
</h:dataTable>
</div>
<div>
<h:messages/>
</div>
</h:form>
<h:form id="new">
<div>
Name :<h:inputText id="name" value="#{approval.name}"/>
Description :<h:inputText id="description" value="#{approval.description}" style="width: 400"/>
<h:commandButton id="create" value="Create New Item" action="#{approval.startProcess}"/>
</div>
</h:form>
</ui:define>

</ui:composition>

View the complete files from the links below:
test.drl
jbpm.cfg.xml
hibernate.cfg.xml
components.xml
approval.jpdl.xml
text.xhtml

Hibernate Batch Processing and Bulk Update/Delete

noreply@blogger.com (Lee) — Wed, 06 Jan 2010 23:23:25 PST

Last few days, I was working on a system, which require a housekeeping function to clean the system database. According to the hibernate documentation :

"Object/relational mapping is concerned with the management of object state. This implies that the object state is available in memory, hence updating or deleting (using SQL UPDATE and DELETE) data directly in the database will not affect in-memory state. However, Hibernate provides methods for bulk SQL-style UPDATE and DELETE statement execution which are performed through EJB-QL ".

Therefore, I was thinking to use bulk update/delete methods provided by Hibernate as my solution. However, I found a lot limitations which force me to give up from using it.
According to the hibernate documentation:

There can only be a single entity named in the from-clause. It can, however, be aliased. If the entity name is aliased, then any property references must be qualified using that alias. If the entity name is not aliased, then it is illegal for any property references to be qualified.
No joins, either implicit or explicit, can be specified in a bulk HQL query. Sub-queries can be used in the where-clause, where the subqueries themselves may contain joins.

In my database design, most entity contain child entity. Number of condition validations are considered too. At the end, I decide to choose Batch Processing to do my data cleaning process. I am using the example from hibernate to delete my entity one by one.

(1) Set the JDBC batch size to a reasonable number (10-50, for example):

hibernate.jdbc.batch_size 50

(2)

Session session = sessionFactory.openSession();
Transaction tx = session.beginTransaction();
 
ScrollableResults customers = session.getNamedQuery("GetCustomers")
   .setCacheMode(CacheMode.IGNORE)
   .scroll(ScrollMode.FORWARD_ONLY);
int count=0;
while ( customers.next() ) {
   Customer customer = (Customer) customers.get(0);
   session.delete(customer);
   if ( ++count % 50 == 0 ) {
       //flush a batch of updates and release memory:
       session.flush();
       session.clear();
   }
}
 
tx.commit();
session.close();


If anyone of you have any good idea please do let me know, since I really no idea what kind of solution I can use.

JBoss Seam Excel Implementation - Part 2

noreply@blogger.com (Lee) — Sat, 29 May 2010 04:30:20 PDT

In my previous post JBoss Seam Excel Implementation, I had mentioned how to configure Microsoft® Excel® Spreadsheet in JBoss Seam and some of the usage of different tags available in Seam. Seam generates Microsoft® Excel® spreadsheet application spreadsheets using JExcelAPI library. For futher information please refer to JExcelAPI .

In the examples below show how to use Formulas and Format Masks in Excel® worksheet.

(1) Formulas: Dynamic Sum of Selected Cells

<e:worksheet value="#{data}" var="item">
<e:column>
<f:facet name="header">
<e:cell value="Amount"/>
</facet>
<e:cell value="#{item.amount}"/>
<f:facet name="footer">
<e:formula value="SUM(A2:A#{data.size+1})"/>
</facet>
</e:column>
</e:worksheet>

Sample of Dynamic Sum of Selected Cells

(2) Format Masks

(a) Number masks:

<e:cell value="#{item.amount}" style="xls-format-mask: FORMAT3"/>

For more more information for formal masks pls refer to jxl.write.NumberFormats

Troubleshooting for CAS SSO and JBoss SSL Configuration

noreply@blogger.com (Lee) — Sat, 05 Dec 2009 05:05:50 PST

Command errors found during CAS SSO implementation on JBoss.

Redirect Loop after login to CAS server
-----------------------------------------------------

ERROR [Cas20ServiceTicketValidator] javax.net.ssl.SSLHandshakeException: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target
javax.net.ssl.SSLHandshakeException: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target

Caused by: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target
at sun.security.validator.PKIXValidator.doBuild(PKIXValidator.java:285)
at sun.security.validator.PKIXValidator.engineValidate(PKIXValidator.java:191)
at sun.security.validator.Validator.validate(Validator.java:218)
at com.sun.net.ssl.internal.ssl.X509TrustManagerImpl.validate(X509TrustManagerImpl.java:126)
at com.sun.net.ssl.internal.ssl.X509TrustManagerImpl.checkServerTrusted(X509TrustManagerImpl.java:209)
at com.sun.net.ssl.internal.ssl.X509TrustManagerImpl.checkServerTrusted(X509TrustManagerImpl.java:249)
at com.sun.net.ssl.internal.ssl.ClientHandshaker.serverCertificate(ClientHandshaker.java:1014)
... 59 more
Caused by: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target
at sun.security.provider.certpath.SunCertPathBuilder.engineBuild(SunCertPathBuilder.java:174)
at java.security.cert.CertPathBuilder.build(CertPathBuilder.java:238)
at sun.security.validator.PKIXValidator.doBuild(PKIXValidator.java:280)
... 65 more
[Cas20ProxyReceivingTicketValidationFilter] org.jasig.cas.client.validation.TicketValidationException: The CAS server returned no response.
org.jasig.cas.client.validation.TicketValidationException: The CAS server returned no response.

ERROR [Exceptions] handled and logged exception
javax.servlet.ServletException: org.jasig.cas.client.validation.TicketValidationException: The CAS server returned no response.

Caused by: org.jasig.cas.client.validation.TicketValidationException: The CAS server returned no response.
at org.jasig.cas.client.validation.AbstractUrlBasedTicketValidator.validate(AbstractUrlBasedTicketValidator.java:181) at org.jasig.cas.client.validation.AbstractTicketValidationFilter.doFilter(AbstractTicketValidationFilter.java:132)
... 45 more

SOLUTION 1:

You must specify the location of the truststore using: -Djavax.net.ssl.trustStore
If not Tomcat will unable to allocate the truststore file.

Example:
run.bat -c default -b 192.168.1.8 -Djavax.net.ssl.trustStore="c:/jboss-4.2.3.GA/server/default/conf/javaroom.keystore"

SOLUTION 2:

During generate the keystore file, you must enter the domain name used for the CAS server.

Example:
What is your first and last name?
[Unknown]: javaroom.com

Generate Self-signed Certificate for CAS SSO on JBoss
CAS Single Sign-On and JBoss Seam Integration
CAS SSO Configuration using JDBC Authentication

Generate Self-signed Certificate for CAS SSO on JBoss

noreply@blogger.com (Lee) — Wed, 20 Oct 2010 23:49:44 PDT

Last few days I was busy to configure CAS SSO into the Linux server. It was definitely a nightmare for me. I expect it will be same as configuration in Windows. No matter I am using the keystore I generated in Windows or I generate a new copy of keystore and self-signed certificate using keytool or openssl in Linux, when start the server it will throw exception in UnsatisfiedLinkError: no sunmscapi in java.library.path. This is something make me so confused! SunMSCAPI is used in Windows platform. This was definitely wasting so much of my times to find out the reason. And finally I found somebody replaced the java.security file in linux server with the Windows version!! Arrrgghh........I wanna cry when I saw that. Now my CAS SSO is working very well in the Linux server. The below configuration of keystore and self-signed certificate for CAS SSO in JBoss is working for Linux and Windows.

Platform:
Windows/Linux
JBoss-4.2.3.GA
CAS-server-3.3.4

6 Steps to enable CAS SSO on JBoss
----------------------------------------------------

(1) Keystore and Private Key (javaroom.keystore):
keytool -genkey -alias javaroom -keyalg RSA -keypass changeit -storepass changeit -keystore javaroom.keystore -validity 3650

**Important: What is your first and last name?
[Unknown]: myhostname.com

(This is very important, must same as the domain name used for CAS server)

(2) Certificate (javaroom.crt):
keytool -export -alias javaroom-storepass changeit -file javaroom.crt -keystore misbserver.keystore

(3) TrustStore (javaroom.keystore):
keytool -import -trustcacerts -file javaroom.crt -keystore javaroom.keystore -storepass changeit

Enter "yes" when
(Store the the certificate into the same keystore file)

(4) Copy misbserver.keystore to c:/jboss/server/default/conf

(5) Update server.xml in c:/jboss/server/default/deploy/jboss-web.deployer

<Connector protocol="HTTP/1.1" port="8443"
minSpareThreads="5" maxSpareThreads="75" enableLookups="true"
disableUploadTimeout="true" acceptCount="100" maxThreads="200"
scheme="https" secure="true" SSLEnabled="true" clientAuth="false" sslProtocol="TLS"
keystoreFile="${jboss.server.home.dir}/conf/javaroom.keystore" keystoreType="JKS" keystorePass="changeit"
truststoreFile="${jboss.server.home.dir}/conf/javaroom.keystore" truststoreType="JKS"
truststorePass="changeit"/>

**Important:
TrustStore file must be specified in <Connector>, if not the default certificate in C:/jdk/jre/lib/security/cacerts will be refered.

(6) Start server with: run.bat -c default -b 192.168.1.8 -Djavax.net.ssl.trustStore="c:/jboss-4.2.3.GA/server/default/conf/javaroom.keystore"

**Important: You must specify the location of the truststore using: -Djavax.net.ssl.trustStore. Otherwise, Tomcat will unable to allocate the truststore file.

Related Posts:

CAS Single Sign-On and JBoss Seam Integration
CAS SSO Configuration using JDBC Authentication

CAS SSO Configuration using JDBC Authentication in JBoss

noreply@blogger.com (Lee) — Thu, 03 Dec 2009 16:55:50 PST

The CAS SSO and JBoss-4.2.3.GA integration is very simple.

Rename the cas-3.3.x.war to cas.war.
Configure the CAS SSO authentication using JDBC authentication(refer to the steps below).
Copy the cas.war into your JBoss deploy directory.

CAS SSO Configuration using JDBC Authentication:

1. deployerConfigContext.xml in cas.war
-----------------------------------------
- Configure the DataSource to be used for CAS

<bean id="dataSource" class="org.springframework.jdbc.datasource.DriverManagerDataSource">
<property name="driverClassName"><value>org.postgresql.Driver</value></property>
<property name="url"><value>jdbc:postgresql:testDatabase</value></property>
<property name="username"><value>test</value></property>
<property name="password"><value>test</value></property>
</bean>

- If you are using your own password encoder to encrypt for the password to be stored in database,
add AnyPasswordEncoder.class into the cas-server-core-3.3.4.jar/org/jasig/cas/authentication/handler/
or you can add the password encoder jar file into cas.war/WEB-INF/lib

- Configure the Password Encoder
<bean id="passwordEncoder" class="org.jasig.cas.authentication.handler.AnyPasswordEncoder"/>

2. Configure database dialect cas.properties in cas.war/WEB-INF folder
-------------------------------------------------------------------------

cas.securityContext.serviceProperties.service=https://test.sso:8443/cas/services/j_acegi_cas_security_check
cas.securityContext.casProcessingFilterEntryPoint.loginUrl=https://test.sso:8443/cas/login
cas.securityContext.ticketValidator.casServerUrlPrefix=https://test.sso:8443/cas

cas.themeResolver.defaultThemeName=default
cas.viewResolver.basename=default

host.name=cas

database.hibernate.dialect=org.hibernate.dialect.PostgreSQLDialect

3. JDBC Library for CAS
---------------------------
Add libraries below into cas.war/WEB-INF/lib

- org.springframework.jdbc-2.5.6.jar
- cas-server-support-3.3.2.jar

If you would like to integrate the CAS SSO with JBoss Seam, please refer to:
CAS Single Sign-On and JBoss Seam Integration and
Generate Self-signed Certificate for CAS SSO on JBoss

CAS Single Sign-On and JBoss Seam Integration

noreply@blogger.com (Lee) — Thu, 03 Dec 2009 16:57:26 PST

I had implemented CAS SSO in my Seam Application. It is working so well. Hope this document can help those planning to implement CAS SSO in their Seam Application.

CAS SSO and Seam Environment:
----------------------------------
Jboss-4.2.3.GA
Seam-2.1.2
cas-server-3.3.4-release
cas-client-3.1.3-release

1. Create SSOAuntheticator.java
-------------------------------
public class SSOAuthenticator {

public void checkLogin()
{
// user may already be logged in - check
final boolean isLoggedIn = Identity.instance().isLoggedIn();

if (isLoggedIn) {
return;
}
authenticate();

public boolean authenticate(){

Identity identity = Identity.instance();

FacesContext facesContext = FacesContext.getCurrentInstance();
ExternalContext ctx = facesContext.getExternalContext();

Principal rawPrincipal = ctx.getUserPrincipal();
String username = rawPrincipal.getName();

try{
String ejbql = "select u from UserAccount u where u.username=:username";
List<UserAccount> result= entityManager.createQuery(ejbql).setParameter("username", username).getResultList();

if(result.size()==1)
{
UserAccount userAccount = (UserAccount)result.get(0);

identity.setUsername(username);
identity.setPassword(username);
identity.isLoggedIn(true);

log.info("Login status....."+identity.isLoggedIn());

if(identity.isLoggedIn())
{
for (UserRole role : userAccount.getRoles())
{

identity.addRole(role.getRoleId());
}

Events.instance().raiseEvent(Identity.EVENT_LOGIN_SUCCESSFUL);
}
return true;
}
}catch(Exception e)
{
System.err.println("authenticate exception: "+e);
return false;
}
return false;
}

public void logout(){
Identity identity = Identity.instance();
identity.isLoggedIn(false);
identity.logout();
Session.instance().invalidate();

FacesContext facesContext = FacesContext.getCurrentInstance();
ExternalContext ctx = facesContext.getExternalContext();

try {
String url = "https://test.com:8443/cas/logout";
ctx.redirect(ctx.encodeResourceURL(url));
} catch (Exception e) {
System.err.println("logout exception: "+e);
}
FacesContext.getCurrentInstance().responseComplete();

}
}

2. Configure SSOAuntheticator in components.xml
-----------------------------------------------
<security:identity authenticate-method="#{ssoAuthenticator.authenticate}"/>

3. Configure login validation in pages.xml
------------------------------------------
<page view-id="*" action="#{ssoAuthenticator.checkLogin}" login-required="false"/>

4. Configure web.xml for Single Sign-On Filter
----------------------------------------------
- Add CAS Authentication Filter
- Sign Out Filter
- Validation Filter
- HttpServletRequest Wrapper Filter
- Assertion Thread Local Filter
- SingleSignOutHttpSessionListener



<filter>
<filter-name>CAS Authentication Filter</filter-name>
<filter-class>org.jasig.cas.client.authentication.AuthenticationFilter</filter-class>
<init-param>
<param-name>casServerLoginUrl</param-name>
<param-value>https://test.com:8443/cas/login</param-value>
</init-param>
<init-param>
<param-name>renew</param-name>
<param-value>false</param-value>
</init-param>
<init-param>
<param-name>serverName</param-name>
<param-value>http://test.com:8080</param-value>
</init-param>
</filter>
<filter>
<filter-name>CAS Validation Filter</filter-name>
<filter-class>org.jasig.cas.client.validation.Cas20ProxyReceivingTicketValidationFilter</filter-class>
<init-param>
<param-name>casServerUrlPrefix</param-name>
<param-value>https://test.com:8443/cas</param-value>
</init-param>
<init-param>
<param-name>redirectAfterValidation</param-name>
<param-value>true</param-value>
</init-param>
<init-param>
<param-name>useSession</param-name>
<param-value>true</param-value>
</init-param>
<init-param>
<param-name>serverName</param-name>
<param-value>http://test.com:8080</param-value>
</init-param>
</filter>
<filter>
<filter-name>CAS HttpServletRequest Wrapper Filter</filter-name>
<filter-class>org.jasig.cas.client.util.HttpServletRequestWrapperFilter</filter-class>
</filter>
<filter>
<filter-name>CAS Assertion Thread Local Filter</filter-name>
<filter-class>org.jasig.cas.client.util.AssertionThreadLocalFilter</filter-class>
</filter>


<filter>
<filter-name>CAS Single Sign Out Filter</filter-name>
<filter-class>org.jasig.cas.client.session.SingleSignOutFilter</filter-class>
</filter>



<filter-mapping>
<filter-name>CAS Single Sign Out Filter</filter-name>
<url-pattern>/*</url-pattern>
</filter-mapping>
<filter-mapping>
<filter-name>CAS Authentication Filter</filter-name>
<url-pattern>/*</url-pattern>
</filter-mapping>
<filter-mapping>
<filter-name>CAS Validation Filter</filter-name>
<url-pattern>/*</url-pattern>
</filter-mapping>
<filter-mapping>
<filter-name>CAS HttpServletRequest Wrapper Filter</filter-name>
<url-pattern>/*</url-pattern>
</filter-mapping>
<filter-mapping>
<filter-name>CAS Assertion Thread Local Filter</filter-name>
<url-pattern>/*</url-pattern>
</filter-mapping>
<listener>
<listener-class>org.jasig.cas.client.session.SingleSignOutHttpSessionListener</listener-class>
</listener>

Related Posts:
CAS SSO Configuration using JDBC Authentication
Generate Self-signed Certificate for CAS SSO on JBoss

Implementation of JNLP/Java Web Start in SSO Environment

noreply@blogger.com (Lee) — Sun, 08 Nov 2009 21:52:28 PST

In my previous post, I came out a workaround to solve the Java Web Start error in Single Sign On environment using JNLP. I thought my problem had been solved and can sleep well. Unfortunately, the nightmare is never gone. I cannot run out from using JNLP in my system:(

I have to use JNLP to launch others component in my web application. Finally, I come the right solution to solve my JNLP error in SSO environment.

When you log into CAS SSO server, a cookie is saved in your browser. This cookie contains a unique ticket number that identifies you to the CAS server. CAS reads the cookie, looks up the ticket in its database, and identifies you. However, when I generate my dynamic JNLP through a servlet, the JNLP does not contains the cookie. Therefore, when I launch my Java component the java web start throw exception in:

#### Java Web Start Error:
#### Unable to load resource: http://sso.com:8080/MyApp/test.jar

com.sun.deploy.net.FailedDownloadException:
Unable to load resource: http://sso.com:8080/MyApp/test.jar

and the wrapped exception:
java.util.zip.ZipException: ZIP file must have at least one entry

SOLUTION:
----------------
To solve this error, we just need to add the Session Id into the JNLP.

<jar href="test.jar;jsessionid=sessionId"/>

See, what a simple solution. And I had wasted so much times to work around here and there:(

Example in the JNLP servlet:

public void doGet(HttpServletRequest request, HttpServletResponse response){
String sessionId = request.getSession().getId();
response.setContentType("application/x-java-jnlp-file");

PrintWriter out = response.getWriter();
out.println("<?xml version=\"1.0\" encoding=\"UTF-8\"?>");
out.println("<jnlp spec=\"1.0+\" codebase=\"" + codebaseURL + "\">");
out.println("<security><all-permissions/></security>");
out.println("<resources><j2se version=\"1.6+\" href=\"http://java.sun.com/products/autodl/j2se\"/>");
out.println("<jar href=\"test.jar;jsessionid="+sessionId+"\"/>");
out.println("</resources>");
out.println("<application-desc main-class=\"mainRun\">");
out.println("</application-desc>");
out.println("</jnlp>");
out.flush();
out.close();
}

How to Avoid Multiple Loops in JBoss Seam EntityQuery

noreply@blogger.com (Lee) — Tue, 03 Nov 2009 18:34:11 PST

In JBoss seam-generated EntityQuery class, when user calls getResultList() method to retrive query result, the getResultList() method will be called many times. This will slow down the system response times and wasting of system resources.
To avoid multiple loops in JBoss Seam EntityQuery getResultList() method, we can annotate getResultList() with @Factory to return the search results.

Example EntityQuery Class:
----------------------------------------
@BypassInterceptors
@Name("userList")
public class UserList extends EntityQuery<User> {

private static final String EJBQL = "select user from User user";

private static final String[] RESTRICTIONS = {
"lower(user.username) like lower(concat(concat('%', trim(both ' ' from #{userList.username}),'%'))",
};

private User user = new User();

public UserList() {
setEjbql(EJBQL);
setRestrictionExpressionStrings(Arrays.asList(RESTRICTIONS));
setMaxResults(25);
}

public User getUser() {
return user;
}

@Factory(value="userResultList", scope=ScopeType.EVENT)
public List<User> getUserResultList() {
List list = null;
if (list==null) {
list = super.getResultList();
}
return list;
}
}

@BypassInterceptors is used to disable interception of calls to a Seam component or Seam component method.

Optimization for JBoss Seam, Richfaces, Ajax and etc.

noreply@blogger.com (Lee) — Tue, 03 Nov 2009 18:40:29 PST

This post is used to record Seam optimization and other related components to be used (Hibernate, EJB3, Java Persistence, Richfaces, Ajax, JSF and etc..)

1. a4j:repeat or ui:repeat
- avoid to use c:forEach
- use a4j:repeat, if want to display row number.
example: #{uiComponent['result'].rowIndex+1}

2. @Factory
- annotate the resultList return in EntityQuery, to avoid multiple loops on the query function
- For details, please refer to the EntityQuery example.

3. rich:modalPanel
- use rich:messages instead of h:messages(won't display in modalPanel)

<a4j:commandButton value="Save" action="#{myController.save}"
oncomplete="#{facesContext.maximumSeverity == null ? 'Richfaces.hideModalPanel(\'myModalPanelId\');' : ''}" />

More optimization for JBoss Seam Web Application will be added frequently....

Implementation of JFrame Component in SSO Environment without JNLP

noreply@blogger.com (Lee) — Mon, 02 Nov 2009 19:19:54 PST

Implementation of JFrame Component in SSO Environment without JNLP

After implemented CAS SSO in my JBoss Seam web application, the dynamic generated JNLP used to launch
Java print component is not working.

The java web start throw exception in:
#### Java Web Start Error:
#### Unable to load resource: http://test.com:8080/MyApp/test.jar

com.sun.deploy.net.FailedDownloadException: Unable to load resource: http://test.com:8080/MyApp/test.jar

and the wrapped exception:
java.util.zip.ZipException: ZIP file must have at least one entry

The CAS SSO blocked the java web start to download jar file. After trying various types of solution found
in forums or other developers, I am still not able to solve this problem.

After failed up so many times, I decided to use a workaround solution to solve this problem.

The existing flow is:
---------------------
user submit request -> servlet generate dynamic jnlp -> jnlp load java component(JFrame)

The workaround flow:
--------------------
user submit request -> servlet generate dynamic html(applet) -> dynamic html(applet) load java component

(1) Applet
- Create an Applet class to call JFrame

public class MyApplet extends JApplet{
public void init(){
String param = getParameter("param");
JFrame frame = new JFrame("New Frame");
frame.setLayout(new BorderLayout());
frame.setSize(200, 200);
frame.setVisible(true);
}
}

(2) Servlet
- Change the Servlet generate dynamic JNLP to generate dynamic HTML to embed APPLET.
- Use the APPLET to load JFrame. JFrame is not allowed in HTML, but we can use JApplet to call JFrame.

PrintWriter out = response.getWriter();
out.println("<applet code=\"test.MyApplet\" archive=\"test.jar\">");
out.println("<param name='param' value='paramVal'></param>");
out.println("</applet>");

(3) XHTML/JSF
- Link to call servlet (eg. servlet mapping = *.app)

<h:outputLink id="test" value="test.app" target="AppletFrame">
<h:outputText value="Test"/>
<f:param name="param" value="123"/>
</h:outputLink>

- Add an iframe in the html page.
<iframe name="AppletFrame" id="AppletFrame" style="height:0; width:0;" frameborder="0"></iframe>

JBoss Seam Excel Implementation

noreply@blogger.com (Lee) — Fri, 11 Dec 2009 17:57:55 PST

After googling around, it was so little information about implementation Microsoft® Excel® spreadsheet in JBoss Seam. After taking sometimes to work on this seam excel implementation, I had documented the step by step how to configure jboss seam excel and some of the workaround tips. Hope this is helpful for everyone.

(1) WEB-INF/lib
- jboss-seam-excel.jar
- jxl.jar

(2) Configure DocumentStore servlet in web.xml

<servlet>
<servlet-name>Document Store Servlet</servlet-name>
<servlet-class>org.jboss.seam.document.DocumentStoreServlet</servlet-class>
</servlet>
<servlet-mapping>
<servlet-name>Document Store Servlet</servlet-name>
<url-pattern>*.csv</url-pattern>
</servlet-mapping>
<servlet-mapping>
<servlet-name>Document Store Servlet</servlet-name>
<url-pattern>*.xls</url-pattern>
</servlet-mapping>

(3) Implement the ExcelWorkbook interface and register in components.xml

<components xmlns:excel="http://jboss.com/products/seam/excel"
xmlns:document="http://jboss.com/products/seam/document"
xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
xsi:schemaLocation="http://jboss.com/products/seam/document http://jboss.com/products/seam/document-2.1.xsd
http://jboss.com/products/seam/excel http://jboss.com/products/seam/excel-2.1.xsd">

<document:document-store use-extensions="true"></document:document-store>

</components>

(4) Create workbook in XHTML

<html xmlns="http://www.w3.org/1999/xhtml"
xmlns:ui="http://java.sun.com/jsf/facelets"
xmlns:e="http://jboss.com/products/seam/excel"
xmlns:h="http://java.sun.com/jsf/html"
xmlns:f="http://java.sun.com/jsf/core"
xmlns:c="http://java.sun.com/jstl/core">

<e:workbook type="jxl" ignoreBlanks="false" filename="user.xsl">
<e:worksheet name="User" value="#{userList}" var="user" startRow="0">
<e:column>
<f:facet name="header">
<e:cell value="No"/>
</f:facet>
<e:formula value="ROW()-1"/>
</e:column>
<e:column>
<f:facet name="header">
<e:cell value="Name"/>
</f:facet>
<e:cell>
<h:outputText value="#{user.name}" escape="false"/>
</e:cell>
</e:column>
</e:worksheet>
</e:workbook>
</html>

TIPS for Excel Worksheet Generation:

To display dynamic row index no:
<e:formula value="ROW()-1"/>

ROW()-1, when first row is used by header.

To display '&':

<e:cell>
<h:outputText value="Andy & Sam" escape="false"/>
</e:cell>

To display border in blank cell:

<e:cell value="#{' '}" style="xls-border:thick black">

To display multiple lines in worksheet header:
<e:workbook>
<e:header>
<f:facet name="center">
<e:cell style="xls-wrap:true;">
This is line 1
This is line 2....
This is line 3....
</e:cell>
</f:facet>
</e:header>
</e:workbook>

To display multiple List in same worksheet:
<e:worksheet name="User" value="#{userList}" var="user" startRow="0">
<e:column>
<f:facet name="header">
<e:cell value="No"/>
</f:facet>
<e:formula value="ROW()-1"/>
</e:column>
<e:column>
<f:facet name="header">
<e:cell value="Name"/>
</f:facet>
<e:cell>
<h:outputText value="#{user.name}"/>
</e:cell>
</e:column>
</e:worksheet>

<c:set var="row" value"#{userList.resultCount}"/>

<e:worksheet name="Account" value="#{accountList}" var="acc" startRow="#{row+2}">
<e:column>
<f:facet name="header">
<e:cell value="Username"/>
</f:facet>
<e:cell>
<h:outputText value="#{acc.username}"/>
</e:cell>
</e:column>
</e:worksheet>

Submit Entity Object through Richfaces Suggestion Box

noreply@blogger.com (Lee) — Wed, 21 Oct 2009 20:30:25 PDT

(1) Index the entity
User.java Entity
-----------------
@Indexed
public class User implements java.io.Serializable{
@Field(index = Index.TOKENIZED)
public String getUsername() {
return this.username;
}

public void setUsername(String username) {
this.username= username;
}
}

(2) Create EntityController class
UserFinder.java EntityController

@Name("userFinder")
public class UserFinder extends EntityController
{
@Transactional
public List<User> getUserList(String username)
{
return getEntityManager().createQuery("select u from User bm where lower(u.username) like lower(:name + '%')").setParameter("name", username).getResultList();
}
}

(3) Optimize <rich:suggestionbox>

selfRendered="true"
minChars="3"

<rich:suggestionbox for="user" selfRendered="true" minChars="3"
ignoreDupResponses="true"
suggestionAction="#{userFinder.getUserList}" var="u">
<h:column>
<h:outputText value="#{u.username}" />
</h:column>
</rich:suggestionbox>

(4) Submit Entity Object through suggestion box

<rich:suggestionbox for="user" selfRendered="true" minChars="3"
ignoreDupResponses="true"
suggestionAction="#{userFinder.getUserList}" var="u">
<h:column>
<h:outputText value="#{u.username}" />
</h:column>
<a4j:support ajaxSingle="true" event="onselect">
<f:setPropertyActionListener value="#{u}"
target="accountHome.instance.user"/>
</a4j:support>
</rich:suggestionbox>

EntityHome.remove Error - Deleted Entity Passed to Persist

noreply@blogger.com (Lee) — Wed, 21 Oct 2009 20:30:01 PDT

Error:
javax.persistence.EntityNotFoundException: deleted entity passed to persist: [com.entity.OrderItem#<null>]

Order.java
----------
public class Order implements Serializable
{
private long orderId;
private Date orderDate;
private List<OrderItem> orderItems = new ArrayList<OrderItem>();

@Id
public long getOrderId() {
return orderId;
}
public void setOrderId(long id) {
this.orderId = id;
}

public Date getOrderDate() {
return orderDate;
}
public void setOrderDate(Date date) {
this.orderDate = date;
}

@OneToMany(mappedBy="order", cascade=CascadeType.ALL)
public List<OrderItem> getOrderItems() {
return orderItems;
}
public void setOrderItems(List<OrderItem> items) {
this.orderItems = items;
}
}

OrderItem.java
--------------
public class OrderItem implements Serializable
{
private long orderItemId;
private Product product;
private int quantity;
private Order order;

@Id
public long getOrderItemId() {
return orderItemId;
}
public void setOrderItemId(long id) {
this.orderItemId = id;
}

public Product getProduct() {
return product;
}
public void setProduct(Product prod) {
this.product = prod;
}

public int getQuantity() {
return quantity;
}

public void setQuantity(int qty) {
this.quantity = qty;
}

@ManyToOne
public Order getOrder() {
return order;
}
public void setOrder(Order order) {
this.order = order;
}

}

OrderItemHome.java
-------------------
public String remove(){
return super.remove();
}

XHTML
-----
<h:commandButton value="Remove" immediate="true" action="#{orderItemHome.remove}"/>

Solution:
-----------
In Order.java

@OneToMany(mappedBy="order", cascade=CascadeType.ALL)
public List<OrderItem> getOrderItems() {
return orderItems;
}

CascadeType.ALL is equivalent to:
cascade = {CascadeType.MERGE, CascadeType.PERSIST, CascadeType.REMOVE, CascadeType.REFRESH}

Change the CascadeType.ALL to:
cascade = {CascadeType.MERGE, CascadeType.REMOVE, CascadeType.REFRESH}