topic '401 Unauthorized' when accessing to webscript from indicator in Alfresco Share in Alfresco Archive

'401 Unauthorized' when accessing to webscript from indicator in Alfresco Share

ardamose123 — Tue, 12 Nov 2013 22:42:34 GMT

I have a Share indicator whose evaluator must retrieve the result of an Alfresco webscript. import org.alfresco.web.evaluator.BaseEvaluator;import org.json.simple.JSONObject;import org.springframework.extensions.surf.ServletUtil;import org.springframework.extensions.surf.exception.ConnectorServiceEx

Re: '401 Unauthorized' when accessing to webscript from indicator in Alfresco Share

rjohnson — Wed, 13 Nov 2013 12:00:03 GMT

As the evaluators run "inside" Alfresco I suspect that you won't be able to get the cookie (as thats a client side thing) but you should be able to get the ticket and send the ticket number on the URL like &alf_ticket=????????? that should then provide enough authorisation.

Re: '401 Unauthorized' when accessing to webscript from indicator in Alfresco Share

rjohnson — Wed, 13 Nov 2013 12:03:38 GMT

Re: '401 Unauthorized' when accessing to webscript from indicator in Alfresco Share

ardamose123 — Wed, 13 Nov 2013 14:44:12 GMT

Both the indicator and its evaluator are deployed in Share, not in Alfresco.

I tried to get the Alfresco ticket of the current session, but to no avail. Is there a way to get it without asking users to type their credentials again?

Below are some snippets of my current code. The evaluator is being executed, but it keeps giving the 401 status code. All of them are deployed in Share using a JAR file.

alfresco/web-extension/evaluator-context.xml


<?xml version='1.0' encoding='UTF-8'?>
<!DOCTYPE beans PUBLIC '-//SPRING//DTD BEAN//EN' 'http://www.springframework.org/dtd/spring-beans.dtd'>

<beans>
   <!– No problems with this one –>
   <bean id="evaluator.doclib.action.isPdf" parent="evaluator.doclib.action.isMimetype">
      <property name="mimetypes">
         <list>
            <value>application/pdf</value>
         </list>
      </property>
   </bean>

   <!– This is the problematic one –>
   <bean id="evaluator.doclib.action.isItReady" class="some.internal.package.CustomEvaluator" />
</beans>
‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍

alfresco/web-extension/share-config-custom.xml


<alfresco-config>
   …
   <config evaluator="string-compare" condition="DocumentLibrary" replace="true">
      …
      <indicators>
         <indicator id="indicator.doclib.action.isItReady" icon="myicon-16.png" index="100" label="Yea!">
            <evaluator>evaluator.doclib.action.isItReady</evaluator>
         </indicator>
      </indicators>
   </config>
</alfresco-config>
‍‍‍‍‍‍‍‍‍‍‍‍‍

This one <em>is</em> deployed in Alfresco: the webscript I'm trying to contact from the evaluator in Share. I'll include just the webscript descriptor, since the authentication configuration is there.

alfresco/extension/templates/webscipts/some/folder


<webscript>
   <shortname>Some name</shortname>
   <description>Some description</description>
   <url>/some/folder/isItReady</url>
   <authentication>user</authentication>
   <format default="json">argument</format>
   <family>Custom</family>
</webscript>
‍‍‍‍‍‍‍‍‍‍

The authentication=user is needed. It won't do if it's changed to "none" or "guest".

Re: '401 Unauthorized' when accessing to webscript from indicator in Alfresco Share

rjohnson — Wed, 13 Nov 2013 23:14:23 GMT

I needed the ticket in share once so I wrote a simple webscript that I called from the share layer via the slingshot alfresco proxy which just called an FTL which returned JSON and output ${session.ticket}. I then used this ticket in a share URL. Messy because you will have to call a webscript via the proxy before you call your pukka script.

Re: '401 Unauthorized' when accessing to webscript from indicator in Alfresco Share

deepak1987 — Thu, 14 Nov 2013 18:23:07 GMT

Hi,

Use the following code snippet for Authentication.

<java>

import org.springframework.extensions.surf.ServletUtil;

Connector conn = ThreadLocalRequestContext.getRequestContext().getServiceRegistry().getConnectorService().getConnector("alfresco", ServletUtil.getSession());

</java>

Re: '401 Unauthorized' when accessing to webscript from indicator in Alfresco Share

ardamose123 — Thu, 14 Nov 2013 22:25:48 GMT

Thanks for your solution, but Alfresco webscript still gives a 401 Unauthorized status code.

Re: '401 Unauthorized' when accessing to webscript from indicator in Alfresco Share

ardamose123 — Thu, 14 Nov 2013 22:29:39 GMT

I tried to get it via Freemarker in Share, but it complained about "session" not being defined.

I enabled a webscript in Alfresco which does this and it works, but still requires "user" authentication, which takes me back to square one.

I tried to get it from some objects in Share, but to no avail.

Is there any other way to get the current session's ticket in Share from a Java evaluator?

Re: '401 Unauthorized' when accessing to webscript from indicator in Alfresco Share

ardamose123 — Thu, 14 Nov 2013 22:39:24 GMT

More information:

Request made by the evaluator through the "alfresco" connector in Share:


GET /alfresco/s/some/folder/isItReady?nodeRef=workspace://SpacesStore/2d4e61ab-8508-4f7f-834c-1f49170d096c HTTP/1.1
User-Agent: Jakarta Commons-HttpClient/3.1
Host: localhost:8080
‍‍‍‍‍

The response from Alfresco:


HTTP/1.1 401 Unauthorized
Server: Apache-Coyote/1.1
WWW-Authenticate: Basic realm="Alfresco"
Content-Type: text/html;charset=utf-8
Content-Length: 951
Date: Thu, 14 Nov 2013 22:23:54 GMT

(Some HTML…)
This request requires HTTP authentication.
(Some more HTML…)
‍‍‍‍‍‍‍‍‍‍‍‍

Re: '401 Unauthorized' when accessing to webscript from indicator in Alfresco Share

deepak1987 — Fri, 15 Nov 2013 15:13:22 GMT

Hi Ariel,

Can you tell me what are you doing in /folder/isItReady Webscript??