topic Re: Authentication woes on share REST API in Alfresco Archive https://connect.hyland.com/t5/alfresco-archive/authentication-woes-on-share-rest-api/m-p/302840#M255970 <HTML><HEAD></HEAD><BODY><SPAN>You can use proxy servlet in share directly to call site WebScript API and don't need to reauthenticate again</SPAN></BODY></HTML> Tue, 07 Oct 2014 02:03:46 GMT kaynezhang 2014-10-07T02:03:46Z Authentication woes on share REST API https://connect.hyland.com/t5/alfresco-archive/authentication-woes-on-share-rest-api/m-p/302839#M255969 I'm trying to ultimately get a CSRF token to post to create-site. I start with the share login to get the JSESSIONID.On executing the below, I have the following:curl –junk-session-cookies -L -H "Content-Type: application/x-www-form-urlencoded" –cookie-jar cookies.txt –cookie cookies.txt -H "Origin: Mon, 22 Sep 2014 12:04:43 GMT https://connect.hyland.com/t5/alfresco-archive/authentication-woes-on-share-rest-api/m-p/302839#M255969 jocylincouch 2014-09-22T12:04:43Z Re: Authentication woes on share REST API https://connect.hyland.com/t5/alfresco-archive/authentication-woes-on-share-rest-api/m-p/302840#M255970 <HTML><HEAD></HEAD><BODY><SPAN>You can use proxy servlet in share directly to call site WebScript API and don't need to reauthenticate again</SPAN></BODY></HTML> Tue, 07 Oct 2014 02:03:46 GMT https://connect.hyland.com/t5/alfresco-archive/authentication-woes-on-share-rest-api/m-p/302840#M255970 kaynezhang 2014-10-07T02:03:46Z Re: Authentication woes on share REST API https://connect.hyland.com/t5/alfresco-archive/authentication-woes-on-share-rest-api/m-p/302841#M255971 <HTML><HEAD></HEAD><BODY><SPAN>Could you explain this more please?</SPAN></BODY></HTML> Wed, 15 Oct 2014 12:40:42 GMT https://connect.hyland.com/t5/alfresco-archive/authentication-woes-on-share-rest-api/m-p/302841#M255971 jocylincouch 2014-10-15T12:40:42Z Re: Authentication woes on share REST API https://connect.hyland.com/t5/alfresco-archive/authentication-woes-on-share-rest-api/m-p/302842#M255972 <HTML><HEAD></HEAD><BODY><SPAN>I don't get the proxy stuff mentioned above, however if the decoded CSRF token is added in to header of the create-site POST request, then you will have a site successfully created. Don't forget all the other cookies, including the CSRF token cookie (but don't decode that one – leave it alone!).</SPAN></BODY></HTML> Tue, 21 Oct 2014 11:02:35 GMT https://connect.hyland.com/t5/alfresco-archive/authentication-woes-on-share-rest-api/m-p/302842#M255972 jocylincouch 2014-10-21T11:02:35Z