mohiva/play-silhouette

Silhouette is an authentication library for Play Framework applications that supports several authentication methods, including OAuth1, OAuth2, OpenID, Credentials or custom authentication schemes.

Simon

@honeycomb-cheesecake

I've added Maven badges some more publishing info. All coming along nicely.

zmerr

@zmerr

Hi, Does Silhouette use netty anywhere in the dependency graph? upgrading Play to 2.8.10 gives me a dependency conflict seemingly on netty.

2 replies

zmerr

@zmerr

@ndeverge Yes sorry, Silhouette depends on Play 2.8.8, which ultimately depends on an outdated version of scala-java8-compat which makes silhouette not compile with 2.8.10. It would be nice if you can update the version of Play in the dependency for the issue to go away. The details are in the recent messages under the playframework gitter

Simon

@honeycomb-cheesecake

Hi, I'll have a look at this and see if I can get a release out for this. If thats the case, will likely be a major release if there are binary incompatibilities. Will let you know when a snapshot is readyfor you to test.

zmerr

@zmerr

@honeycomb-cheesecake Thank you. Greatly appreciate this.

Nicolas Deverge

@ndeverge

@honeycomb-cheesecake I just sent a PR for the Play upgrade here: honeycomb-cheesecake/play-silhouette#14

nemoo

@nemoo

It should also be mentioned in the Readme here https://github.com/honeycomb-cheesecake/play-silhouette that this is now the official new home for Silhouette. And it would be amazing if the old Readme here https://github.com/mohiva/play-silhouette linked to the new home. Users need the clarity.

Simon

@honeycomb-cheesecake

Hi all, v7.0.2 released to Sonatype (https://s01.oss.sonatype.org/content/repositories/releases/io/github/honeycomb-cheesecake/), should be available for download into projects, just make sure you use in latest play.

Hi @nemoo, I've added your suggestion to the TODO to add. I've also detached the project from com.mohiva as that is archived now. As you say, we are the official home now.

@zmerr, thank you for the heads up, and @ndeverge thanks for the PR.

zmerr

@zmerr

@honeycomb-cheesecake Thanks for doing all the hard work.

Obafemi Teminife

@AndySakov

Hi everyone, I'm having a bit of trouble integrating Silhouette into my Play project. My problem is specifically with the BearerTokenAuthenticator, I don't know how the setup for it is done and all the example resources I've seen so far only cover the JWTAuthenticator. Also I think I could use some help with the process of starting out with integrating Silhouette into an existing Play project, I've tried going through the examples and although I have a somewhat useful understanding of what is going on, it all just comes at me at once and I don't really know what the process is. For some context, with Play, the process of setting up a route is first an entry in the routes file, then a function for the route to call in the controller etc. I'd really like something like that to simplify the process for me. Thanks in advance.

Simon

@honeycomb-cheesecake

Hi Obafemi, welcome to the play silhouette channel and congratulations and starting out on your play silhouette journey. Where are you up to with the integration? E.g. have you included the dependencies, configured dependency injection etc? If you throw up a project on GitHub, I and others can help and it will serve as a useful record for others in the future.

Obafemi Teminife

@AndySakov

Hi Simon, thanks for the offer, the project is actually a template scala project that I was developing to use in the future to remove the need for setting up the boilerplate, so I'll be happy to share it with others, I had already made a version and you can find it here. I originally implemented the BearerToken auth with the process described in this article and I wasn't satisfied with the way it was done, but I couldn't find another alternative for a while, then all of a sudden I found Silhouette and I just knew I had to port it over. Anyhow, I've already begun with the process of porting but I'm stumped. Nevertheless, I've uploaded my progress to a separate branch temp. You can check it out and let me know where to go from there. Thanks again.

Obafemi Teminife

@AndySakov

As for my progress with the port, all I've been able to manage to do is include the dependencies in the build.sbt file and do some light file restructuring, I also setup the environment but I haven't been able to get the hang of the whole thing enough to actually use it in a controller. I usually have no problem picking up a framework on my own but this situation has been most peculiar. It would be nice if a bunch of us could get together and create a dedicated tutorial, just to make it easier for newbies like myself to find our footing quickly. Thankfully this was a personal project, just imagine if it was for work, I'd be in a pickle. I found that the docs were really only able to help to understand the various different components but not really how they came together to make it all work. And all the other articles available were made with the deprecated version in mind. Anyhow, I volunteer to help with the tutorial, whenever it's convenient for everyone else interested, we can figure it out.

Max

@Max-AR

https://github.com/Max-AR/play-silhouette-seed I've updated this so it compiles and uses the new location for the JARs, plus the workaround for the atlassian source problems (bintray shut down)

the original one is archived, otherwise i would have sent a PR

@honeycomb-cheesecake I also flicked a request on the readme.io docs about the versions for SBT

Simon

@honeycomb-cheesecake

Hi Max, thanks for this. There's an issue on the GitHub someone has raised which might be linked to the bintray shutdown you mentioned. I'll respond you your readme request in the next few days.

Hi @AndySakov, I've given your project a quick look and I'll have a look at putting in some bits so that you can see how silhouette integrates. Will let you know when something is available.

Max

@Max-AR

honeycomb-cheesecake/play-silhouette#15

Yep! This was the issue and I just copied the resolvers line into my build.sbt

Obafemi Teminife

@AndySakov

@honeycomb-cheesecake Thanks

Simon

@honeycomb-cheesecake

Hi all, version 7.0.3 of Silhouette has been released! You can include it in your projects now and thanks to the contributors to this release.

Antoine Doeraene

@sherpal

:tada:

Max

@Max-AR

Cheers Simon!

Simon

@honeycomb-cheesecake

Hi all, v7.0.4 of Silhouette has been released with a fix by @ndeverge. You can include it in your projects and thanks to @ndeverge for the spot.

Brian Miller

@bkmdev

Hi, anyone know how to disable outright logging of passwords in cleartext via com.mohiva.play.silhouette.api.util.LowPriorityRequestExtractors when <logger name="com.mohiva" level="DEBUG" />?

Brian Miller

@bkmdev

Note, obviously one can just not use DEBUG but then you lose DEBUG-level logging entirely. In general I don't see why any library should ever log passwords in cleartext though?

Brian Miller

@bkmdev

ok, someone needs to update the topic/channel link as all the links to the docs on https://github.com/mohiva/play-silhouette & forum just lead to a "Buy this domain" page? I guess the new project home is now at https://github.com/honeycomb-cheesecake/play-silhouette

Jeremias

@defic

Can I restrict the allowed domains using google oauth login?

Max

@Max-AR

I am having some trouble with the seed project. I have extended it to use the Auth0 implementaiton and I am consistently getting a JsResultException(errors:List((,List(JsonValidationError(List('sub' is undefined on object: {}),ArraySeq()))))) error. Auth0 thinks that I have successfully logged in. It looks like there is an error happening with the JWT decoding but i cant seem figure it out. The error manifests itself at Auth0Provider.scala:123. Has anyone run into a similar problem?

Max

@Max-AR

I also tried to build the lib locally to debug the issue, but I was getting this error from the latest commit on master;

[warn]     :: com.atlassian.jwt#jwt-core;3.2.3: not found
[warn]     :: com.atlassian.jwt#jwt-api;3.2.3: not found

[warn]     Note: Unresolved dependencies path:
[warn]         com.atlassian.jwt:jwt-core:3.2.3 (/Users/maxr/IdeaProjects/play-silhouette/silhouette/build.sbt#L3-17)
[warn]           +- io.github.honeycomb-cheesecake:play-silhouette_2.13:7.0.4 ()
[warn]         com.atlassian.jwt:jwt-api:3.2.3 (/Users/maxr/IdeaProjects/play-silhouette/silhouette/build.sbt#L3-17)
[warn]           +- io.github.honeycomb-cheesecake:play-silhouette_2.13:7.0.4 ()

Max

@Max-AR

honeycomb-cheesecake/play-silhouette#22

Simon

@honeycomb-cheesecake

Hi @Max-AR, merged and released.

Hi everyone, v7.0.5 of play-silhouette has been released and is ready for inclusion! Have fun!

Max

@Max-AR

@honeycomb-cheesecake Thank you!

Simon

@honeycomb-cheesecake

Hi everyone, v7.0.7 of play-silhouette has now been released and is ready for inclusion into your projects. A special thanks goes to Hubert Polkowski for his LinkedIn fix. Have fun as always!! Si

Nicolas Deverge

@ndeverge

Thanks @honeycomb-cheesecake

Simon

@honeycomb-cheesecake

Hi everyone, really good news with the play-silhouette library to share.

I've done much work modernising the project structure, including updating the dependencies (including plugins) to latest, adding dependency vulnerability checks and update checks, static code checks adding an automated release process and continuous deployment to maven for the project. The full change log is available at https://github.com/honeycomb-cheesecake/play-silhouette/blob/update-project-structure/CHANGELOG.md. I've responded to much of the extra checks and with all of this released a v8.0.0-SNAPSHOT version to maven. With all of this in mind a v8.0.0 release is imminent.

As this is a major release, there are a number of breaking changes to be aware of. Firstly, the project is sunsetting Scala 2.12 support as it is now in maintenance releases, and getting ready to support Scala 3. Silhouette exceptions now use Option[Throwable] = None rather than Throwable = null (one example from the inclusion of scapegoat). Also, library references have been changed from com.mohiva.play to io.github.honeycombcheesecake.play, so all of these will need to be changed in your projects. You can prepare for the upcoming release by adding the snapshot resolver (see instructions at https://github.com/honeycomb-cheesecake/play-silhouette/blob/master/README.md) and updating your version to 8.0.0-SNAPSHOT.

I'm sure you'll find this all useful, and I'm looking forward to updating you all with more cool features in the future.

Simon

@honeycomb-cheesecake

Changelog https://github.com/honeycomb-cheesecake/play-silhouette/blob/master/CHANGELOG.md

Rory Graves

@rorygraves

Amazing work !

Simon

@honeycomb-cheesecake

Hi everyone, to make things more straightforward going forward regarding chats, support etc, like with the official Play Framework library, I've setup a Discord server. Please follow us over there, and let's keep this going! The Gitter will remain for history and previous questions, but going forward the Discord is where I'll focus ensuring you all are kept up to date with the project. https://discord.gg/djvKx63v

Nick Price

@Rocketeer007

Sorry to say, the Discord link you've supplied appears to be invalid... any chance of any update?

zmerr

@zmerr

Congrats Simon for the new release and the big contributions 👏🏻🎉🎊

Simon

@honeycomb-cheesecake

Thanks @zmerr !!!! Team effort!

Hi @Rocketeer007, I'm guessing I provided link had a time limit, so here's an updated one 😀 https://discord.gg/F3qTKrTwt9

Nick Price

@Rocketeer007

Thanks @honeycomb-cheesecake ! Much appreciated.

Simon

@honeycomb-cheesecake

Hi all, see the Discord for details about the upcoming v9.x.x series of play-silhouette. This includes an update for date handling by @Rocketeer007 as well as an updated JWT mechanism to support more signing formats.

Where communities thrive

People

Repo info

Activity