Every time you use Acegi

December 3rd, 2007

A fairy dies.

The sad thing is there really isn’t anything better around. Here’s hoping the Spring guys whip it into shape now that its “part of the Spring stack.”

Update: Ben Alex describes a much simplified Spring Security 2.0-M1 release! Looking forward to trying it out. While Miami is sounding quite nice compared to the local Michigan weather, I’m not sure I’ll be able to make it down the Spring Experience for the session. :-)

17 Responses to “Every time you use Acegi”

  1. Jason Says:

    I’m always wondering why folks seem so interested in integrating acegi and wicket when its so much simpler to just extend AuthenticatedApplication and implement a method or 2 and sprinkle some annotations around…

  2. angry Says:

    Acegi is an abomination of stupid jargons and disgusting configurations.

  3. anonymous Says:

    Here is to the constructive criticism.

  4. jose Says:

    if you need to write 10 verbose and hard to grasp configuration beans for making Basic Authentication, it means there is a serious problem.

  5. Dan Diephouse Says:

    Completely agree here with Jose. The fact that I need to write *180* lines of XML to configure Acegi for a simple simple user authentication in front of a webapp means that something is eriously wrong. There should be default profiles which configure things out of the box and provide minimal switches so users can’t screw things up.

  6. Dan Diephouse Says:

    Also, Mr Anonymous: its my blog and I’ll bitch when I want to! :-)

  7. Ben Alex Says:

    We’re working on it!

    You should come along to my talk next week at The Spring Experience, where I’m showing off the new Spring Security 2.0 M1 features (which exist even as I write this). A single web filter is all you need, plus . That will give you form login, BASIC auth, remember-me, exception translation, servlet API integration, and a logout URL. Heck, you don’t even need to write your login page if you don’t want to (it renders one for you). Need annotation support? Just add and it’s done. What about a database-backed authentication repository? How about . The days of 180 line XML files are over. :-)

  8. Ben Alex Says:

    Drats! My comment was stripped of its XML. It was meant to be:

    < http autoConfig=”true” >

    < annotation-driven / >

    < jdbc-user-service dataSource=”dataSource” >

  9. anonymous Says:

    I have to admit I have wrestled plenty with acegi, and am super happy to see it being simplified.

    Most importantly though, congrats on the original post. That was *funny*. I am still chuckling about it a couple hours later, I guess you need to use acegi to appreciate it fully. Thanks for the laugh.

  10. Joe from GR JUG Says:

    I agree that acegi is a mess, I also have to say that a month after I integrated it I need my project to authenticated to active directory. All I had to do was add another authentication provider, I thought that was pretty slick. I will have to look into the wicket authentication in the future…

    Also Dan thanks for backin’ me up on the goodness that is the GWT. I hear you hang out with my friend Zan, we all should catch a beer sometime, I would love to talk to you about a project I just deployed using xfire.

  11. Kalpesh Patel Says:

    Acegi is really mess.
    I spend at least 2-3 days to get it working with lots of XML.

  12. netzooid » Blog Archive » The Fairies Live: Spring Security 2.0 is out Says:

    [...] I’ll have to talk about other projects killing fairies [...]

  13. LosAngeles Says:

    Assuming either the Left Wing or the Right Wing gained control of the country, it would probably fly around in circles.

  14. Dallas Says:

    O, it is excellent to have a giant’s strength; but it is tyrannous to use it like a giant.

  15. gychonamync Says:

    Hello, my friend!
    Please, don’t hate me, I just want to earn some money :)
    See you!
    Buy phentermine here!

  16. Live from SpringOne 2008: Keynote : Springify Says:

    [...] Security (formerly Acegi Security). As we all happen to know by now, every time you used Acegi, a fairy died. The configuration was just horrible (someone compared it to strangling a dragon with bare hands, [...]

  17. Ordina J-Technologies Weblog » Blog archief » Spring Security Says:

    [...] Het is inmiddels al even geleden dat Acegi Security gerebrand is naar Spring Security. Acegi stond bekend om de erg lastige configuratie. Een gebruiker heeft zelfs gezegd dat: “every time I use Acegi a fairy dies..” [...]

Leave a Reply