Works great. Thanks for posting it.

Unless I missed something I didn’t find a wicket build-in getter for “username”
So, I’ve added private variable “username” next to roles and a getUsername().

Laurent

I tried that option, but for some reason it did not work: isUserInRole() calls still failed on everything. This could mean that WebAuthentication does exactly that: authenticate, but no authorization.

In JBoss 4.2.2, you can get logged into the Application Server by using the WebAuthentication class. It’s located in JBoss, in the jbossweb-service.jar file. It’s not on a Maven Repository as far as I know, so you have to install it manually.

You can use it something like:

    private boolean authenticateForContainer(String username, String password) {
        WebAuthentication webAuthentication = new WebAuthentication();
        return webAuthentication.login(username, password);
    }

I have no idea on how to to this in older versions of JBoss!

You can find more information about it here: http://roneiv.wordpress.com/2008/03/15/using-webauthentication-in-jboss/