topic Re: Manage authentication in a custom web app relying on Alfresco Repository in Alfresco Archive

Manage authentication in a custom web app relying on Alfresco Repository

mlagneaux — Thu, 11 Aug 2016 14:06:26 GMT

Hello,I'm working on a web application relying on Alfresco Repository (Community 5.1) as a back end. It can be seen as an alternative to Alfresco Share.I have several questions about managing authentication in this web application.For now, my login page makes a POST request to native webscript /alfr

Re: Manage authentication in a custom web app relying on Alfresco Repository

openpj — Thu, 22 Sep 2016 14:54:46 GMT

I suggest you to enable the external authentication of Alfresco.

In this way you can proxy each HTTP call against any WebScripts directly decorating the HTTP Header with the username of the user that should execute the method without using alf_ticket in query string.

Please take a look at the official documentation:

External authentication and SSO | Alfresco Documentation

Please let us know if you need more information.

Hope this helps.

Re: Manage authentication in a custom web app relying on Alfresco Repository

ddraper — Thu, 22 Sep 2016 16:05:10 GMT

It would be great to learn a bit more about what you're doing... for example, why you're building a new client rather than customizing Share? and what technology stack you're going to be using.

For example, you may or may not be aware that you can build a Surf client really easily using the Aikau Maven Archetype. You wouldn't be limited to using Aikau (although that would obviously be an option) but it would provide a simple way of getting a basic client up and running with authentication all taken care of (allowing you to access CMIS, Repo WebScripts and the Public API).

Instructions on creating a custom client using this archetype can be found here