Query - Basic Authentication Login related

classic Classic list List threaded Threaded
4 messages Options
Reply | Threaded
Open this post in threaded view
|

Query - Basic Authentication Login related

Joseph Lawrence
Hi all,
    I worked with the following code related to the basic authentication login:
            <xforms:submission method="get" action="http://www.scdi.org/~avernet/try/protected/success.xml"
                    id="protected-submission" replace="instance"
                    xxforms:username="ops" xxforms:password="ops">

and it works fine. However when changed @replace="instance" to @replace="all" its not working good(I expected a new page to get loaded). Am I heading in the right direction? Also, why doesn't the post method work with remote uri access(i am newbie to s/w development)?

Thanks
Joseph Lawrence
Stabilix Solutions


Don't pick lemons.
See all the new 2007 cars at Yahoo! Autos.

--
You receive this message as a subscriber of the [hidden email] mailing list.
To unsubscribe: mailto:[hidden email]
For general help: mailto:[hidden email]?subject=help
ObjectWeb mailing lists service home page: http://www.objectweb.org/wws
Reply | Threaded
Open this post in threaded view
|

Re: Query - Basic Authentication Login related

Erik Bruchez
Administrator
Joseph,

 > I worked with the following code related to the basic authentication
 > login:
 >             <xforms:submission method="get"
 > action="http://www.scdi.org/~avernet/try/protected/success.xml"
 >                     id="protected-submission" replace="instance"
 >                     xxforms:username="ops" xxforms:password="ops">
 >
 > and it works fine. However when changed @replace="instance" to
 > @replace="all" its not working good(I expected a new page to get
 > loaded).

And, what happens?

I can see a problem though: the XForms engine goes into "optimized
mode" for performing the GET, and in that mode, the server simply
tells the client to load the page at the given URL. But this should
not be done when you specify a username and password, as then the user
would have to enter the credentials.

I made a change in the code to disable optimizing GET when credentials
are supplied.

 > Am I heading in the right direction? Also, why doesn't the post
 > method work with remote uri access(i am newbie to s/w development)?

What's "remote uri access"?

-Erik

--
Orbeon Forms - Web Forms for the Enterprise Done the Right Way
http://www.orbeon.com/




--
You receive this message as a subscriber of the [hidden email] mailing list.
To unsubscribe: mailto:[hidden email]
For general help: mailto:[hidden email]?subject=help
ObjectWeb mailing lists service home page: http://www.objectweb.org/wws
Reply | Threaded
Open this post in threaded view
|

Re: Query - Basic Authentication Login related

Joseph Lawrence
Hi Erik,
     Thank you very much for the information. In fact, what I meant by 'remote uri access' was that to send a submission to a url like "http://www.scdi.org/~avernet/try/protected/success.xml" with @method="post" which I expected to yield  the same result as when @method="get".

ie, something like
<xforms:submission id="default" method="post" action="http://www.scdi.org/~avernet/try/protected/success.xml" replace="all" xxforms:username="ops" xxforms:password="ops" />

to render a new page.

Thanks
Joseph Lawrence
Stabilix Solutions

Erik Bruchez <[hidden email]> wrote:
Joseph,

> I worked with the following code related to the basic authentication
> login:
>
> action="http://www.scdi.org/~avernet/try/protected/success.xml"
> id="protected-submission" replace="instance"
> xxforms:username="ops" xxforms:password="ops">
>
> and it works fine. However when changed @replace="instance" to
> @replace="all" its not working good(I expected a new page to get
> loaded).

And, what happens?

I can see a problem though: the XForms engine goes into "optimized
mode" for performing the GET, and in that mode, the server simply
tells the client to load the page at the given URL. But this should
not be done when you specify a username and password, as then the user
would have to enter the credentials.

I made a change in the code to disable optimizing GET when credentials
are supplied.

> Am I heading in the right direction? Also, why doesn't the post
> method work with remote uri access(i am newbie to s/w development)?

What's "remote uri access"?

-Erik

--
Orbeon Forms - Web Forms for the Enterprise Done the Right Way
http://www.orbeon.com/



--
You receive this message as a subscriber of the [hidden email] mailing list.
To unsubscribe: mailto:[hidden email]
For general help: mailto:[hidden email]?subject=help
ObjectWeb mailing lists service home page: http://www.objectweb.org/wws


Now that's room service! Choose from over 150,000 hotels
in 45,000 destinations on Yahoo! Travel
to find your fit.

--
You receive this message as a subscriber of the [hidden email] mailing list.
To unsubscribe: mailto:[hidden email]
For general help: mailto:[hidden email]?subject=help
ObjectWeb mailing lists service home page: http://www.objectweb.org/wws
Reply | Threaded
Open this post in threaded view
|

Re: Query - Basic Authentication Login related

Erik Bruchez
Administrator
Joseph,

>      Thank you very much for the information. In fact, what I meant by
> 'remote uri access' was that to send a submission to a url like
> "http://www.scdi.org/~avernet/try/protected/success.xml" with
> @method="post" which I expected to yield  the same result as when
> @method="get".
>
> ie, something like
> <xforms:submission id="default" method="post"
> action="http://www.scdi.org/~avernet/try/protected/success.xml"
> replace="all" xxforms:username="ops" xxforms:password="ops" />
>
> to render a new page.
I am not sure what that particular URL does with a POST, but in general,
POST is supported by Orbeon Forms. What happens if you use POST on that URL?

-Erik

--
Orbeon Forms - Web Forms for the Enterprise Done the Right Way
http://www.orbeon.com/



--
You receive this message as a subscriber of the [hidden email] mailing list.
To unsubscribe: mailto:[hidden email]
For general help: mailto:[hidden email]?subject=help
ObjectWeb mailing lists service home page: http://www.objectweb.org/wws