topic Re: CMIS 1.1 browser bindings via share proxy in Alfresco Archive

CMIS 1.1 browser bindings via share proxy

idwright — Wed, 04 Jun 2014 11:43:47 GMT

This seems like a rather simple question so apologies for asking but I can't find the answer.I'm wanting to experiment with the CMIS 1.1 browser bindings via client side javascript in ShareFor the deprecated CMIS interface the URL is:Alfresco.constants.PROXY_URI + "cmis/p/…"Going directly to Alfresc

Re: CMIS 1.1 browser bindings via share proxy

kaynezhang — Wed, 04 Jun 2014 15:30:55 GMT

Why do you want to use share proxy? you can just send(GET/POST) request to alfresco repository directly using javascript.
The browser binding is designed to use just with HTML and JavaScript

Re: CMIS 1.1 browser bindings via share proxy

idwright — Thu, 05 Jun 2014 11:29:34 GMT

It's necessary to use the proxy to avoid cross-site scripting limitations.
The legacy CMIS end points are supported via the proxy but I'd like to avoid using deprecated end points.
(Granted it's possible to work around this, how depends on the overall configuration, but examples using the legacy CMIS end points always seem to use the proxy so I thought it would be best to follow suit if possible)
Using the browser binding is to avoid the overhead of translating from XML to JSON.

I'm thinking about creating a CMIS based dojo data store which would be quite useful as it would easily plug in to lots of existing Dojo widgets (but like I said this is all experimental at this point - it would certainly be easier to do something more specific for the particular use case)

Re: CMIS 1.1 browser bindings via share proxy

kaynezhang — Thu, 05 Jun 2014 14:24:59 GMT

You can use JSONP to bypass Same-Origin Policy,please look at http://docs.alfresco.com/4.2/pra/1/concepts/cmis-1.1-browser-binding-get.html

Re: CMIS 1.1 browser bindings via share proxy

idwright — Fri, 06 Jun 2014 08:05:59 GMT

Thanks for the link
Like I said ways around it - I just thought I'd start by looking at options compatible with the deprecated CMIS api.

Undoubtably JSONP is the right way to approach this.

I think I'll take it that the answer to the original question is that there isn't a share proxy to the new CMIS endpoints .

Re: CMIS 1.1 browser bindings via share proxy

kevinr — Fri, 10 Oct 2014 11:58:00 GMT

Thank you for raising this on JIRA also. We can add a Share proxy endpoint for CMIS 1.1 browser bindings so you should then be able to use the standard authentication mechanisms.

https://issues.alfresco.com/jira/browse/ALF-21129

Cheers,

Kevin

Re: CMIS 1.1 browser bindings via share proxy

kevinr — Wed, 15 Oct 2014 08:24:05 GMT

I have tried adding an endpoint for the public API to Share Surf proxy config. I mapped "alfresco-public" to the public API REST URL on the Alfresco end so I could make calls like /cmis/versions/1.1/browser from Share.

However the authentication does not work nor can I find a simple way to map it across.

Looking deeper at PublicApiAuthenticatorFactory class (which is used to authentication the public API), it appears that it does not in fact support the various mechanisms that other endpoints support. It is quite strict, only supporting OAuth or X-Remote-User with a predefined X-Alfresco-Authenticator-Key from a list set in the repository. This is not easily done with the available authentication paths in Share currently.

So I cannot see a simple way to do this currently and it will require further investigation. I will try to make some time for it after the 5.0 release - as I find it very strange that the public API is different to the other endpoints in Alfresco! It does not make it easy to use unless you go the direct OAuth route…

Re: CMIS 1.1 browser bindings via share proxy

softwareloop — Wed, 29 Oct 2014 09:51:03 GMT

I'm having the same issue while migrating a plugin from 4.2.f/5.0.a to 5.0.b. The plugin called the deprecated cmis API from javascript in the browser, via Share's proxy. In 5.0.b the deprecated cmis api is no longer available so I have to use the public alfresco/api. I'm experiencing the same problem as in the original post.

To do some experiments, I've also tried to add the endpoint as suggested:

<blockcode>
         <endpoint>
            <id>alfresco-public</id>
            <name>Alfresco public API - user access</name>
            <description>Access to Alfresco API that require user authentication</description>
            <connector-id>alfresco</connector-id>
            <endpoint-url>http://localhost:8080/alfresco/api</endpoint-url>
            <identity>user</identity>
         </endpoint>
</blockcode>

…but at the moment I'm stuck with 401 Unathorized responses.

Re: CMIS 1.1 browser bindings via share proxy

idwright — Mon, 03 Nov 2014 13:19:10 GMT

The best I've managed so far is to obtain a ticket and append that to the CMIS URL as the alf_ticket parameter

There are various posts describing how to create a service that returns a ticket for a logged in user essentially:

get-ticket.get.desc.xml


<webscript>
   <shortname>Get current ticket</shortname>
   <description>Returns a valid ticket for the currently logged in user
   </description>
   <url>/auth/get-ticket</url>
   <format default="json" />
   <authentication>user</authentication>
   <transaction>none</transaction>
</webscript>
‍‍‍‍‍‍‍‍‍‍‍

get-ticket.get.js


model.sessionTicket = session.getTicket();
‍‍‍

get-ticket.get.json.ftl


<#escape x as jsonUtils.encodeJSONString(x)>
{
   "ticket": "${sessionTicket}"
}
</#escape>
‍‍‍‍‍‍‍

Re: CMIS 1.1 browser bindings via share proxy

kevinr — Wed, 12 Nov 2014 10:57:17 GMT

Indeed I hit the same issues. It looks like it is going to need some changes before it can work.
1. Unfortunately the Public API does things a little differently as it is on a different endpoint with a different auth pattern.
2. Share/surf does not know how to Share auth between endpoints.

I am going to take a look at 1 & 2 to see what can be done for a Community release solution in the future.

Cheers,

Kevin

Re: CMIS 1.1 browser bindings via share proxy

kevinr — Wed, 12 Nov 2014 10:58:14 GMT

Yes that is the best workaround for now - it is not ideal obviously and will not map nicely onto whatever SSO you are already using for Share - which is what we'd like to fix.

Cheers,

Kevin

Re: CMIS 1.1 browser bindings via share proxy

idwright — Thu, 13 Nov 2014 08:02:36 GMT

Indeed - it would be great for this to work with SSO - to do this the CMIS endpoint needs to be able to use HttpServletRequest.getRemoteUser()

Cheers,
Ian

Re: CMIS 1.1 browser bindings via share proxy

kevinr — Mon, 17 Nov 2014 16:16:17 GMT

Good news is that I have this working now on a branch. Ability to call Public API from Share and X-Alfresco-Remote-User SSO working against that API route. I will see what can be done about getting this into 5.0.c.

Thanks,

Kevin

Re: CMIS 1.1 browser bindings via share proxy

kevinr — Wed, 03 Dec 2014 09:22:11 GMT

Unfortunately I am unable to get this into 5.0.c as it is already finalised and no more changes are allowed. So it will be in HEAD shortly after that, I'll let you know when there is a build to test.

Re: CMIS 1.1 browser bindings via share proxy

kevinr — Mon, 02 Feb 2015 09:48:00 GMT

Hurrah. At last HEAD is open again and commits are merged, including the ability to call public APIs like CMIS from Share.
http://dev.alfresco.com/downloads/nightly/dist/

Share endpoint looks like this:


         <endpoint>
            <id>alfresco-api</id>
            <parent-id>alfresco</parent-id>
            <name>Alfresco Public API - user access</name>
            <description>Access to Alfresco Repository Public API that require user authentication. This makes use of the authentication that is provided by parent 'alfresco' endpoint.</description>
            <endpoint-url>http://localhost:8080/alfresco/api</endpoint-url>
            <identity>user</identity>
         </endpoint>
‍‍‍‍‍‍‍‍‍‍

Kev