topic Re: Alfresco Web Script Portlet rivet in Alfresco Archive

Alfresco Web Script Portlet rivet

rivetlogic — Wed, 15 Apr 2009 14:57:11 GMT

AWPrAWPr is a JSR-168 portlet that can be used to expose remote Alfresco Web scripts, including those that need user authentication. With the help of a custom Alfresco authentication component that we wrote the portlet can carry the user credentials from the portal to Alfresco, authenticate the user

Re: Alfresco Web Script Portlet rivet

ahuja_neeraj — Tue, 19 May 2009 08:16:41 GMT

Hi

I found AWPr is a very useful portlet. However while using this with the sample myspaces webscripts which interacts with alfresco I found that only the UI is rendered but but no content is displayed as shown in one of the screen shots.

After investigation I've found that there is a Javascript error in the connection-min.js files which halts the execution of the controller script. The error says

Access to restricted URI denied" code: "1012 while executing "o.conn.open(method,uri,true)" statement from connection-min.js files.

Please help me to resolve this error.

Regards
Neeraj

Re: Alfresco Web Script Portlet rivet

rivetlogic — Tue, 19 May 2009 12:37:47 GMT

Hi,

The reason this is happening is due to cross-domain security. You can resolve this issue using a proxy like mod_jk for example. The following wiki page explains what the proxy setup should do:

http://wiki.rivetlogic.com/display/AWPr/Example+Web+scripts

The basic idea is that Alfresco must be accessible using the same domain name as that of the portal.

Hope this helps,

–Alaaeldin

Re: Alfresco Web Script Portlet rivet

marco_altieri — Sun, 24 May 2009 14:05:41 GMT

Your portlet seems really interesting, but I would like to ask you a question.
If a portlet developed with "Rivet Web Script portlet" shows a link to a non public document inside Alfresco, can the user access it?
For example: MySpaces portlet can show the link below:
http://portal-hostname.com/alfresco/d/d/workspace/SpacesStore/1dacbd04-d028-482f-9359-a7e195f06442/filename.ppt
If the user clicks on it, the access to the document will not be a "liferay access", but a direct access to Alfresco, so the user wouldn't be authenticated. Would he?
How did you solve this problem? Should one use a standard SSO like CAS?

Thank you,
Marco

Re: Alfresco Web Script Portlet rivet

rivetlogic — Sun, 24 May 2009 14:45:54 GMT

Hi,

What's happening is that the MySpaces webscript adds a cookie with the Alfresco ticket in it to the client browser when the webscript is first rendered. Subsequent calls to the Alfresco download servlet will then be authenticated as the Liferay user.

The portlet will call the Alfresco login webscript initially to get an Alfresco ticket for the Liferay user. As a side note, this ticket is sent on every request from the AWPr portlet instance to Alfresco via a URL argument called 't'. This is to allow webscript authors to do whatever they want with that ticket.

If you copied the Alfresco download URL and pasted it into a browser that doesn't have the Alfresco cookie you will be redirected to the Alfresco login page. But if you add the parameter 'ticket=TICKET_<ticket-value>' you will be able to download the document if the user who owns the ticket has read rights on it.

The drawback here is that you wouldn't be able to robustly have more than one portlet on the same portal page displaying webscripts that serve download URLs from different unclustered Alfresco servers because the cookie would keep getting overwritten. The only way would be to append the ticket to the download URL like so:


/alfresco/d/d/workspace/SpacesStore/771fbc61-d11a-4685-8a4d-143c310d07f0/image.png?ticket=TICKET_fb8dfe0f9fdf48b62e428fbe8f6665ddab01db55
‍‍‍

This is ok but not desirable since accessing this URL from any browser will authenticate the request as that user which could pose a security risk.

–Alaaeldin

Re: Alfresco Web Script Portlet rivet

nowhere — Mon, 25 May 2009 17:26:58 GMT

Hi,
I found AWPr is an useful portlet to expose remote Alfresco Web scripts and fortunately I got it working. I also managed to expose entire alfresco under portal…but I didn't succeeded so I toke a chance with AWPr portlet.
Now, my problem is that I have already my webscripts, say webscript A and in A's ftl template I have a link to another webscript of mine, say B webscript…but I dind't find a way to open B on the screen within the confines of the portlet window. In the best case…it leave liferay portal and opens as simple alfresco webscritp (say url http://localhost:8080/wcservice/B.
Can anyone help me to solve this issue?
Greetings,
Rosa

Re: Alfresco Web Script Portlet rivet

rivetlogic — Tue, 26 May 2009 01:37:20 GMT

Hi,

AWPr provides a javascript function that can be used to convert Alfresco URLs to Liferay URLs in the client's browser. This function is used by awprmyspaces.js which is packaged with the example webscripts AMP.

The method is called AWPr.encodeUrl(). Of course this means that you won't be able to have more than one AWPr instance on the same portal page. The next AWPr release takes care of this issue by adding a portlet preference that allows you to configure the name of the javascript variable that holds the encodeUrl function thus allowing for multiple AWPr instances on the same portal page to have different javascript encodeUrl functions. The way it will work is as follows:

If the preference value is 'ABC', then the javascript variable will be called 'AWPr_ABC' and the function will be called like this:

AWPr_ABC.encodeUrl()

To see an example of how to use this function you can see this link: http://wiki.rivetlogic.com/display/AWPr/AWPr+Design#AWPrDesign-AJAXcalls

Another feature we will add is another portlet preference that allows you to configure what strings need to be replaced and what they should be replaced by. We could also have another portlet preference that allows you to configure other script URLs that need to be proxied. That way you could run webscripts that navigate back and forth between one another.

Hope this helps,

–Alaaeldin

Re: Alfresco Web Script Portlet rivet

nowhere — Tue, 26 May 2009 17:41:19 GMT

Hi Rivet,
thanks for your support… Now I'm facing with AJAX (JSON) calls made by myself…It's my first time with them so I'm getting what I want, but I can't say if it's correct.
I read about AWPr encodeUrl function, it seems interesting and I wrote a simple test but I didn't get what I need:



<script type="text/javascript">
<!–
 function func() {
   var link = document.getElementById("my");
   link.setHTML('<a href="' + AWPr.encodeUrl("/alfresco/wcservice/quality/quality2") + '">Click Here</a>');

}
// –>
</script>
 <body onload="func();">
   <div class="content">
      <div id="articles">
         <div id="right">
                                                  <p id="my">temp</p>
….(other stuff)
‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍

and what I get in href is "http://localhost:8081/web/guest/home?p_p_id=awpr_WAR_awpr_INSTANCE_Hm1D&p_p_lifecycle=1&p_p_state=normal&p_p_mode=view&p_p_col_id=column-1&p_p_col_count=1" where I suppose istance is the same as first portlet load that is linked to webservce (/alfresco/wcservice/quality/quality1) (say A, as in my firts post), so I get a second call to same webscript and not to B (/alfresco/wcservice/quality/quality2). Surely I'm in wrong somewhere… Let me know what you think, also about making AJAX calls from zero. Sorry If I can't explain better , they all are new concepts to me.
Thanks again!

Re: Alfresco Web Script Portlet rivet

rivetlogic — Tue, 26 May 2009 17:55:38 GMT

Hi,

The current release of AWPr assumes that you are using a single webscript where all navigation happens within that webscript itself. The other supported scenario is for an outer webscript calling an inner webscript using an AJAX call much like what you see with MySpaces and MySpacesPanel.

We will try to support your use case by adding a portlet preference that accepts a list of script URLs that are to be proxied but I'm not sure when we will be able to release it. I'll update this forum when I have a date. I'll also try to include it in the upcoming 1.1.0 release.

How urgent is your need for this feature?

Thanks,

–Alaaeldin

Re: Alfresco Web Script Portlet rivet

nowhere — Tue, 26 May 2009 18:04:23 GMT

Hi again,
you are very kind…but I need it working in a few days, so don't considerate my needs in your release planning.

Still, I don't understand when you say:

The other supported scenario is for an outer webscript calling an inner webscript using an AJAX call much like what you see with MySpaces and MySpacesPanel.

Could you explain this? ops:
I can't understand if it fits my use case…May be I'm misurdestanding, otherwise I'll continue working at my "silly" solution.

Re: Alfresco Web Script Portlet rivet

rivetlogic — Tue, 26 May 2009 18:12:40 GMT

The MySpaces webscript that comes with Alfresco uses a YUI asynchronous call to get the contents of an inner webscript called MySpacesPanel and changes the URLs to using the URL encoder function. You could potentially do the same thing in your webscript where the "Click Here" link will make an AJAX call and get the other webscript (quality2) and use the encodeUrl function to change the URLs in that webscript.

I'm not sure if that will work in your case though so it would probably be best to use the next release of AWPr for this.

–Alaaeldin

Re: Alfresco Web Script Portlet rivet

nowhere — Tue, 26 May 2009 18:24:07 GMT

It's what I do…I have differents links making AJAX call, but I don't know if and why I should need to encode URLs in second webscript… :roll:

Sincerely thanks for help again, now I can't wait…in future I'll look for next release

Re: Alfresco Web Script Portlet rivet

dnunez_mx — Thu, 28 May 2009 16:01:44 GMT

Hello,

First I want to thank you for you awesome job with AWPr. It is very nice. Now about my situation, I'm experiencing some problems calling AWPRmyspaces webscript. I have mod_jk mounted and also I already configured the portlet in liferay so my enviroment taking account that apache is receiving all request is:

Apache: http://localhost
Alfreso: http://localhost/alfresco [http://localhost:8080/alfresco]
Liferay: http://localhost/* [http://localhost:8090/liferay]

I configured AWPrmyspaces webscript with the following:

alfrescoContextPath = /alfresco
alfrescoHost = http://localhost
httpMethod = GET
webscriptsParams = {f}[], {p}[], {alfUrl}[http://localhost/alfresco]
webScriptURL = /ui/awprmyspaces

Now the problems.

1.-Even though I can see the webscript, I am only able to visualize the default user space. When I give clic to the root or another folder in the path, I always go to the default path (like refreshing the webscript ). In other words the webscript is not taking into account the path of which folder I want to see. The thing is that when I call the webscript directly to tomcat (http://localhost:8080/wcservice/ui/awprmyspaces?alfUrl=http://localhost/alfresco ) from firefox it works fine, but from liferay it doesnt.The problem is basically that if I go directly to alfresco server it works, but If I dont and I call the webscript from liferay (awpr) and passing throughout the proxy it doesnt work, maybe it is a simple error but I havent worked with proxies until now. If you have any idea please tell me.

2.-Our alfresco repository contains some folders with latin chars like í, ó. So Awpr portlet its failing because it doesnt encode properly the folder name, I dont know why, but I checked the logs and it is sending the latin chars not being encoded as alfUrl param. However for example it is encoding spaces or other chars. Any idea what to do?

Thanks in advance for your help.

Diego

Re: Alfresco Web Script Portlet rivet

rivetlogic — Thu, 28 May 2009 16:49:54 GMT

Hi Diego,

What kind of error are you getting with the folder names? Can you please post the error in AWPr's jira?

http://issues.rivetlogic.com/browse/AWPR

Thanks,

–Alaaeldin

Re: Alfresco Web Script Portlet rivet

dnunez_mx — Fri, 29 May 2009 09:27:41 GMT

Hello Alaaeldin,

Thanks for you quick response. I already posted the error on AWPr´s Jira.

http://issues.rivetlogic.com/browse/AWPR-2

Thanks a lot ,

Diego

Re: Alfresco Web Script Portlet rivet

dnunez_mx — Fri, 29 May 2009 23:23:17 GMT

Hi Alaaeldin,

I saw your solution about my problem but I'm not sure to understand. Please correct me If I misunderstood the cause. But according with your explanation, you will add an extra option to select the encoding type (UTF-8, ISO-8859-1) when sending the params in the portlet. But its supposed that UTF-8 is covering latin chars and many others right? I this is true why the portlet is required to use ISO-8859-1?

And about my first problem :
1.-Even though I can see the webscript, I am only able to visualize the default user space. When I give clic to the root or another folder in the path, I always go to the default path (like refreshing the webscript ). In other words the webscript is not taking into account the path of which folder I want to see. The thing is that when I call the webscript directly to tomcat (http://localhost:8080/wcservice/ui/awpr … t/alfresco ) from firefox it works fine, but from liferay it doesnt.The problem is basically that if I go directly to alfresco server it works, but If I dont, and I call the webscript from liferay (awpr) and passing throughout the proxy it doesnt work.
Do you have any clue to follow?

Thanks so much for your effort with this project,

Diego

Re: Alfresco Web Script Portlet rivet

rivetlogic — Fri, 29 May 2009 23:34:11 GMT

Hi Diego,

The character encoding restriction you will find is related to the database. By default (if I'm not mistaken) MySQL is set to use Latin-1 as the characterset:


mysql> status;
————–
mysql  Ver 14.12 Distrib 5.0.51b, for apple-darwin9.0.0b5 (i686) using readline 5.0

Connection id:      71
Current database:   
Current user:      root@localhost
SSL:         Not in use
Current pager:      stdout
Using outfile:      ''
Using delimiter:   ;
Server version:      5.0.51b-log MySQL Community Server (GPL)
Protocol version:   10
Connection:      Localhost via UNIX socket
Server characterset:   latin1
Db     characterset:   latin1
Client characterset:   latin1
Conn.  characterset:   latin1
UNIX socket:      /tmp/mysql.sock
Uptime:         4 days 22 hours 27 min 10 sec

Threads: 22  Questions: 203200  Slow queries: 0  Opens: 175  Flush tables: 1  Open tables: 169  Queries per second avg: 0.477
‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍

So what's happening here is that the webscript fails o find the path to the folder because the encoding is UTF-8. If your server configuration ensures the use of utf8 then things should work using UTF-8. I decided to make the character encoding a portlet preference to make AWPr more flexible.

Now regarding your other issue. It's related to the same character encoding problem. What's happening is that the way MySpaces and AWPrMySpaces are written is that if the folder you're trying to navigate to does not exist it will default to the user's home folder. Do your folders that have latin characters in them are failing and the webscript is sending you to the logged in user's Alfresco home folder.

Hope this helps.

–Alaaeldin

Re: Alfresco Web Script Portlet rivet

rivetlogic — Fri, 29 May 2009 23:36:44 GMT

Diego,

Another thing I noticed is that your Alfresco proxy setting should probably be fixed.

Currently it's set as follows:

http://localhost/alfresco [http://localhost:8080/alfresco]

You should set it like so:

http://localhost/alfresco* [http://localhost:8080/alfresco]

I have tested it with mod_jk, but if you want to use another proxy make sure you can access the Alfresco webclient using the following url:

http://localhost/alfresco

Cheers,

–Alaaeldin

Re: Alfresco Web Script Portlet rivet

rivetlogic — Sun, 31 May 2009 02:49:22 GMT

AWPr 1.1.0 has been released and has new features that address the use cases and issues we've received from the AWPr users.

The main features are: (see the wiki for more details)

- Control over the AWPr javascript variable

- Control over which Web script URLs should be proxied

- Control over what type of encoding to use for request parameters

You can download AWPr 1.1.0 here.

Please use this forum if you have any questions about the new features.

Thanks,

–Alaaeldin

Re: Alfresco Web Script Portlet rivet

marco_altieri — Mon, 01 Jun 2009 10:51:12 GMT

I would like to use your portlet but I need to change something: I need a user on Alfresco called liferayguest and I need to change the authenticator you provide to authenticate a guest user on Liferay as a liferayguest on Alfresco. This is because guest users should be able to contribute on Alfresco using an Alfresco portlet.

I think I need to customize the Star amp (is it correct?) and so I'm looking for the source code of this amp, but I could not find them. Could you help me, please?

Thank you
Marco

Hi,

What's happening is that the MySpaces webscript adds a cookie with the Alfresco ticket in it to the client browser when the webscript is first rendered. Subsequent calls to the Alfresco download servlet will then be authenticated as the Liferay user.

The portlet will call the Alfresco login webscript initially to get an Alfresco ticket for the Liferay user. As a side note, this ticket is sent on every request from the AWPr portlet instance to Alfresco via a URL argument called 't'. This is to allow webscript authors to do whatever they want with that ticket.

If you copied the Alfresco download URL and pasted it into a browser that doesn't have the Alfresco cookie you will be redirected to the Alfresco login page. But if you add the parameter 'ticket=TICKET_<ticket-value>' you will be able to download the document if the user who owns the ticket has read rights on it.

The drawback here is that you wouldn't be able to robustly have more than one portlet on the same portal page displaying webscripts that serve download URLs from different unclustered Alfresco servers because the cookie would keep getting overwritten. The only way would be to append the ticket to the download URL like so:
/alfresco/d/d/workspace/SpacesStore/771fbc61-d11a-4685-8a4d-143c310d07f0/image.png?ticket=TICKET_fb8dfe0f9fdf48b62e428fbe8f6665ddab01db55
‍‍‍
This is ok but not desirable since accessing this URL from any browser will authenticate the request as that user which could pose a security risk.

–Alaaeldin