topic Re: Share Custom Authentication in Alfresco Archive

Share Custom Authentication

soloff — Mon, 13 Jun 2016 13:00:17 GMT

Dear colleagues, could you kindly help me with the problem described here.I have to develop Custom Authentication method, so that users can log in the system in two ways: enter their UserName or their personal number (Custom Person Attribute).First of all, I set authentication.chain in <strong>

Re: Share Custom Authentication

afaust — Tue, 14 Jun 2016 08:12:38 GMT

Both the <a href="https://github.com/Alfresco/share/blob/fab09705778b71d4c424279ab3d433b93fdb74ce/share/src/main/java/org/alfresco/web/site/servlet/SlingshotLoginController.java">SlingshotLoginController</a> and the <a href="https://github.com/Alfresco/share/blob/fab09705778b71d4c424279ab3d433b93fdb74ce/share/src/main/java/org/alfresco/web/site/SlingshotUserFactory.java">SlingshotUserFactory</a> use the name provided in the login UI as the user name. If that name now can be a multitude of things, e.g. an email address or personal number, then these components need to be adapted or replaced in Share to work with the new authentication methods. Essentially they should no longer trust the name provided and strive to load the correct information from the Repository-backend in order to execute the code they need to execute.

Regards
Axel

Re: Share Custom Authentication

soloff — Mon, 20 Jun 2016 15:18:00 GMT

Thank you very much for your help!
So, I have overrided <strong>SlingshotLoginController</strong> in this way

<java>
public class CustomLoginController extends SlingshotLoginController
{
    @Override
    public ModelAndView handleRequestInternal(HttpServletRequest request, HttpServletResponse response) throws Exception
    {
        …
            boolean authenticated = this.userFactory.authenticate(request, username, password);
            if (authenticated)
            {
               username = this.resolveLoginToUserName(username);
                AuthenticationUtil.login(request, response, username, false, webFrameworkConfiguration.isLoginCookiesEnabled());
                success = true;
            }
        …
    }

    private String resolveLoginToUserName(String login) throws JSONException
    {
   String URL = URLEncoder.encodeUri(String.format("/api/user/logintousername?login=%s", login));
   Response response = this.scriptRemote.call(URL);
   JSONObject result = new JSONObject(response.getResponse());
   return result.getString("username");
    }
}
</java>