Apache shiro not working correctly

[wassimz]

Hi,

I was testing some scenario and it seems that the apache shiro integrated is not working properly. Below is the scenario I have done: 1 - Login first time correctly (OK) 2- logout bu clicking on menu button 3- Manually enter the following URI: http://localhost:8080/ui/#!icons 4- The icon view is showed without displaying the menu (only the view)

Normally in the last step, the login view is prompt to the user as he has already logout.

Maybe we can verify if the user is authenticated on the navigator beforeChangeView listener but this is now part of the cdi-helpers addon.

Any hint or helps ??

Thanks

[Zixxl]

I ran into the same issue. The solution was to annotate the views with @RolesAllowed. This way only logged in users could access the views, also the navigation hides all views which are not accessible. Though i ran into another issue, the roles are not checked after the login so I have to refresh the page to reload the roles of the user. Maybe someone else has a solution for this part?