Newbie Question - Authentication

classic Classic list List threaded Threaded
4 messages Options
Reply | Threaded
Open this post in threaded view
|

Newbie Question - Authentication

John Russell-2
Hi I've been randomly reading parts of the documention before using  
Orbeon Forms.
If one performs a

<xforms:submission action="{external location}" replace="instance"/>

how is authentication handled? does the forwarding process from the  
server
ask the user at the browser for authentication credentials?

Thank you
John Russell


--
You receive this message as a subscriber of the [hidden email] mailing list.
To unsubscribe: mailto:[hidden email]
For general help: mailto:[hidden email]?subject=help
OW2 mailing lists service home page: http://www.ow2.org/wws
Reply | Threaded
Open this post in threaded view
|

Re: Newbie Question - Authentication

Erik Bruchez
Administrator
John,

In Orbeon Forms, submissions do not ask the user for authentication  
credentials. We feel that they are part of private application code  
with which the user shouldn't be involved.

However, you have ways of passing credentials. By default, Orbeon  
Forms attempts to forward the JSESSIONID cookie it received, as well  
as the Authorization header.

In addition, you can use xxforms:username / xxforms:password on the  
submission:

   http://www.orbeon.com/ops/doc/reference-xforms-2#submission-auth-extension

-Erik

On Apr 16, 2008, at 8:17 PM, John Russell wrote:

> Hi I've been randomly reading parts of the documention before using  
> Orbeon Forms.
> If one performs a
>
> <xforms:submission action="{external location}" replace="instance"/>
>
> how is authentication handled? does the forwarding process from the  
> server
> ask the user at the browser for authentication credentials?
>
> Thank you
> John Russell
>
> --
> You receive this message as a subscriber of the [hidden email]  
> mailing list.
> To unsubscribe: mailto:[hidden email]
> For general help: mailto:[hidden email]?subject=help
> OW2 mailing lists service home page: http://www.ow2.org/wws
--
Orbeon Forms - Web Forms for the Enterprise Done the Right Way
http://www.orbeon.com/



--
You receive this message as a subscriber of the [hidden email] mailing list.
To unsubscribe: mailto:[hidden email]
For general help: mailto:[hidden email]?subject=help
OW2 mailing lists service home page: http://www.ow2.org/wws
Reply | Threaded
Open this post in threaded view
|

Re: Re: Newbie Question - Authentication

John Russell-2
Thank you Erik,

so if the xform is a stylesheet it may be possible to get the username  
and password from
the orbeon environment and co-ordinate a single sign-on by  
authenticating Orbeon externally
(ie to the same authentication service as used by the xml database)?

<xforms:submission id="save-submission" ref="instance('my-instance')"  
method="put" resource="/exist/rest/ops/my-file.xml" replace="none"  
xxforms:username="{admin}" xxforms:password="{}"/>

Can you let me know where to find documentation about configuring  
Orbeon authentication externally please.

John.



On Apr 17, 2008, at 12:14 PM, Erik Bruchez wrote:

> John,
>
> In Orbeon Forms, submissions do not ask the user for authentication  
> credentials. We feel that they are part of private application code  
> with which the user shouldn't be involved.
>
> However, you have ways of passing credentials. By default, Orbeon  
> Forms attempts to forward the JSESSIONID cookie it received, as well  
> as the Authorization header.
>
> In addition, you can use xxforms:username / xxforms:password on the  
> submission:
>
>  http://www.orbeon.com/ops/doc/reference-xforms-2#submission-auth-extension
>
> -Erik
>
> On Apr 16, 2008, at 8:17 PM, John Russell wrote:
>> Hi I've been randomly reading parts of the documention before using  
>> Orbeon Forms.
>> If one performs a
>>
>> <xforms:submission action="{external location}" replace="instance"/>
>>
>> how is authentication handled? does the forwarding process from the  
>> server
>> ask the user at the browser for authentication credentials?
>>
>> Thank you
>> John Russell
>>
>> --
>> You receive this message as a subscriber of the [hidden email]  
>> mailing list.
>> To unsubscribe: mailto:[hidden email]
>> For general help: mailto:[hidden email]?subject=help
>> OW2 mailing lists service home page: http://www.ow2.org/wws
>
> --
> Orbeon Forms - Web Forms for the Enterprise Done the Right Way
> http://www.orbeon.com/
>
>
> --
> You receive this message as a subscriber of the [hidden email]  
> mailing list.
> To unsubscribe: mailto:[hidden email]
> For general help: mailto:[hidden email]?subject=help
> OW2 mailing lists service home page: http://www.ow2.org/wws


--
You receive this message as a subscriber of the [hidden email] mailing list.
To unsubscribe: mailto:[hidden email]
For general help: mailto:[hidden email]?subject=help
OW2 mailing lists service home page: http://www.ow2.org/wws
Reply | Threaded
Open this post in threaded view
|

Re: Re: Re: Newbie Question - Authentication

Erik Bruchez
Administrator
> so if the xform is a stylesheet it may be possible to get the  
> username and password from
> the orbeon environment and co-ordinate a single sign-on by  
> authenticating Orbeon externally
> (ie to the same authentication service as used by the xml database)?
>
>
> <xforms:submission id="save-submission" ref="instance('my-
> instance')" method="put" resource="/exist/rest/ops/my-file.xml"  
> replace="none" xxforms:username="{admin}" xxforms:password="{}"/>

You don't even need the form to be produced through XSLT for this to  
work.

> Can you let me know where to find documentation about configuring  
> Orbeon authentication externally please.


   http://www.orbeon.com/ops/doc/reference-authentication

-Erik

--
Orbeon Forms - Web Forms for the Enterprise Done the Right Way
http://www.orbeon.com/



--
You receive this message as a subscriber of the [hidden email] mailing list.
To unsubscribe: mailto:[hidden email]
For general help: mailto:[hidden email]?subject=help
OW2 mailing lists service home page: http://www.ow2.org/wws