topic Re: Opensearch query and Authenticated session with ticket in Alfresco Archive

Opensearch query and Authenticated session with ticket

keepcool — Fri, 22 Jan 2010 21:45:12 GMT

Hi all,I want my external application gets the content of alfresco repository by querying it. For this reason I use Alfresco Keyword Search to obtain an OpenSearch response from alfesco. To do that first I need to obtain an authenticated session by asking the ticket (because my application is in jav

Re: Opensearch query and Authenticated session with ticket

pmonks — Sat, 23 Jan 2010 03:33:44 GMT

For programmatic access to Alfresco it's generally a better idea to use REST (Web Scripts) and authenticate using HTTP Basic Authentication. This is done by accessing Web Scripts via /alfresco/service, and doesn't require an explicit login call, nor does it require ticket management on the calling side.

For your specific case (OpenSearch) there is a REST API (Web Script) included in Alfresco. You'll need to look at the Web Script registry to find it though, as I don't have ready access to an Alfresco instance at the moment to fund it myself.

Cheers,
Peter

Re: Opensearch query and Authenticated session with ticket

keepcool — Sat, 23 Jan 2010 17:02:08 GMT

Dear Pmonks,

I used the opensearch url template, http://<host>:<port>/alfresco/service/api/search/keyword?q={searchTerms}&p={startPage?}&c={count?}&l={language?}, to query "alfresco repository". The problem is that the query returned the http 500 error "A valid SecureContext was not provided in the RequestContext"

Can you provide me instructions or examples to implement Http Basic Authentication?

Thank you for your support

A.

Re: Opensearch query and Authenticated session with ticket

pmonks — Sat, 23 Jan 2010 18:03:50 GMT

HTTP Basic Authentication is defined in RFC2617 (http://www.ietf.org/rfc/rfc2617.txt). Most HTTP client libraries include native support for it, although Java's java.net.URLConnection class doesn't, so if you're using Java a better bet is the Apache HTTP Client library (http://hc.apache.org/).

Cheers,
Peter

Re: Opensearch query and Authenticated session with ticket

keepcool — Sun, 24 Jan 2010 21:07:27 GMT

Hi pmonks,
I've watched some examples class in the apache component distribution. I've also tried to use them for my purpose. For example I've tried to connect and authenticate to alfresco using ClientAuthentication class, here the principal lines of code:

        DefaultHttpClient httpclient = new DefaultHttpClient();
        httpclient.getCredentialsProvider().setCredentials(new AuthScope("localhost", 8080), new UsernamePasswordCredentials("admin", "admin"));
   HttpGet httpget = new HttpGet("http://localhost:8080/alfresco/service/api/search/keyword.rss?q=lingo");

However I continue to obtain an http 500 error :"A valid SecureContext was not provided in the RequestContext". Specifing username and password, I was hoping to get an authenticated session, but it is not.
I also tried to use the class ClientInteractiveAuthentication but the result is the same. Maybe I'm not using it properly.

I really need advice
Thank you again for your valuable help

A.

Re: Opensearch query and Authenticated session with ticket

analyzediz — Sat, 30 Jan 2010 05:54:31 GMT

I am the exact same problem. I am also using HttpClient. In my case I'm trying to use the WebDAV component of Alfresco to retrieve content. I keep getting Http 401 error code, which just means that it can't authorize me.

Here's the code that I'm using:


      DefaultHttpClient defaultClient = (DefaultHttpClient)client;
      
      List<String> authTargetSchemes = new ArrayList<String>();
      authTargetSchemes.add(AuthPolicy.BASIC);
      defaultClient.getParams().setParameter("http.auth.target-scheme-pref", authTargetSchemes);
      defaultClient.getParams().setParameter("http.protocol.handle-authentication", true);
      
      defaultClient.getCredentialsProvider().setCredentials(new AuthScope("localhost", "8080", "webdav"),
            new UsernamePasswordCredentials(username, password));
      defaultClient.execute(method);
‍‍‍‍‍‍‍‍‍‍‍‍

Any ideas?

Thanks.