topic Re: Alfresco Share Autologin in Alfresco Archive

Alfresco Share Autologin

sergey_khariton — Tue, 15 Dec 2009 12:02:37 GMT

Hi, Alfrescans!I investigate this subject and develop a simple autologin filterThis code is not ideal, but I think, it helps somebody.Before apply filter, create new user in the Alfresco anonymous:anonymouspackage ru.eurekabpo.alfresco.autologin;import java.io.IOException;import java.util.Enumeratio

Re: Alfresco Share Autologin

thomasrjones — Tue, 05 Jan 2010 16:58:35 GMT

What location did you place the filter code? e.g. filename and directory

Re: Alfresco Share Autologin

sergey_khariton — Tue, 12 Jan 2010 07:55:33 GMT

What location did you place the filter code? e.g. filename and directory

Thomas, you need to compile this code, pack into jar and place into /tomcat/webapps/share/WEB-INF/lib/youJarName.jar

Re: Alfresco Share Autologin

novetica — Tue, 07 Dec 2010 13:39:39 GMT

Hi Sergey,
could you confirm that user auth is extracted from http-auth basic in apache/tomcat environment?

Could you provide a .jar already compiled or is alfresco-version dependent?

Thanks,

Marco

Re: Alfresco Share Autologin

novetica — Sun, 09 Jan 2011 21:03:33 GMT

News at http://forums.alfresco.com/en/viewtopic.php?f=9&t=21876&p=107102#p107102

Re: Alfresco Share Autologin

vishal3521 — Thu, 24 Jan 2013 13:54:54 GMT

Hi Sergey,

I'm using the version 4.0.c. And, I don't find any library jar within the installation to be used for compiling the code given by you. Are these packages (org.alfresco.web.site and org.alfresco.connector) moved to some other distribution? Can you please tell me where can I find these classes/Libraries?

Thanks.

Re: Alfresco Share Autologin

avyaznikov — Thu, 25 Apr 2013 06:40:20 GMT

By the start of 2010, Spring Surf had been contributed as plug-in for Spring Web MVC (<a href="http://wiki.alfresco.com/wiki/Spring_Surf">http://wiki.alfresco.com/wiki/Spring_Surf</a>).
Here is a modified code for 4.0 (4.2) alfresco version. You should create anonymous user manually and correctly setup permissions (according to your demands).



import java.io.IOException;

import javax.servlet.Filter;
import javax.servlet.FilterChain;
import javax.servlet.FilterConfig;
import javax.servlet.ServletException;
import javax.servlet.ServletRequest;
import javax.servlet.ServletResponse;
import javax.servlet.http.HttpServletRequest;
import javax.servlet.http.HttpServletResponse;
import javax.servlet.http.HttpSession;

import org.springframework.context.ApplicationContext;
import org.springframework.context.ApplicationContextAware;
import org.springframework.extensions.surf.RequestContext;
import org.springframework.extensions.surf.RequestContextUtil;
import org.springframework.extensions.surf.UserFactory;
import org.springframework.extensions.surf.exception.RequestContextException;
import org.springframework.extensions.surf.site.AuthenticationUtil;
import org.springframework.extensions.surf.support.ThreadLocalRequestContext;
import org.springframework.extensions.webscripts.connector.User;
import org.springframework.web.context.support.WebApplicationContextUtils;

/**
 * Auto login as guest filter
 * @author avyaznikov
 * 
 */
public class AutoLoginFilter implements Filter, ApplicationContextAware {

    private static String username = "anonymous";
    private static String password = "anonymous";

    private ApplicationContext applicationContext;
    private FilterConfig filterConfig;

    public void setApplicationContext(ApplicationContext applicationContext) {
        this.applicationContext = applicationContext;
    }

    @Override
    public void destroy() {
    }

    @Override
    public void doFilter(ServletRequest sreq, ServletResponse sresp, FilterChain chain) throws IOException, ServletException {
        HttpServletRequest req = (HttpServletRequest) sreq;

        HttpServletResponse resp = (HttpServletResponse) sresp;
        HttpSession httpSess = req.getSession(true);

        RequestContext context = ThreadLocalRequestContext.getRequestContext();
        if (context == null) {
            if (applicationContext == null) {
                applicationContext = WebApplicationContextUtils.getRequiredWebApplicationContext(filterConfig.getServletContext());
                // applicationContext = RequestContextUtils.getWebApplicationContext(sreq);
            }
            try {
                context = RequestContextUtil.initRequestContext(applicationContext, req);
            } catch (RequestContextException e) {
                // TODO Auto-generated catch block
                e.printStackTrace();
            }
        }

        User user = context.getUser();
        if (user != null && !user.getId().equals(UserFactory.USER_GUEST)) {
            // already authenticated
            chain.doFilter(sreq, sresp);
            return;
        }

        try {
            // pass the proxy CAS ticket to alfresco to authenticate (and get an alfresco ticket)
            UserFactory userFactory = context.getServiceRegistry().getUserFactory();
            boolean authenticated = userFactory.authenticate(req, username, password);
            if (authenticated) {
                // this will fully reset all connector sessions
                AuthenticationUtil.login(req, resp, username);
            }
        } catch (Throwable err) {
            throw new ServletException(err);
        }
        chain.doFilter(sreq, sresp);
    }

    @Override
    public void init(FilterConfig filterConfig) throws ServletException {
        this.filterConfig = filterConfig;
    }

}

‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍

Re: Alfresco Share Autologin

hont_vn — Fri, 13 Sep 2013 07:10:06 GMT

Hello,

Do we need to replace the existing Authentication Filter in Alfresco Share, or use both the existing one and the new AutoLoginFilter?

The existing filter:


<filter>
      <description>Share SSO authentication support filter.</description>
      <filter-name>Authentication Filter</filter-name>
      <filter-class>org.alfresco.web.site.servlet.SSOAuthenticationFilter</filter-class>
      <init-param>
         <param-name>endpoint</param-name>
         <param-value>alfresco</param-value>
      </init-param>
   </filter>

‍‍‍‍‍‍‍‍‍‍‍‍

I tried to use both of them, but then Alfresco failed to access.

Re: Alfresco Share Autologin

vurquia — Thu, 15 Jan 2015 15:47:53 GMT

I tried to use this class on alfresco 5.0, without success.

Re: Alfresco Share Autologin

resplin — Fri, 16 Jan 2015 02:54:00 GMT

You are more likely to get a response if you start a new thread, rather than posting to a long quiet thread.