topic Re: Login To Alfresco API in Alfresco Forum

Login To Alfresco API

coisox — Thu, 05 Jul 2018 01:11:48 GMT

Using this API, I can get the token to do some stuff:https://mydomain/alfresco/service/api/login?u=myusername&pw=mypasswordBut when I go to my Alfresco, I still be prompt for login:https://mydomain/share/page/I need a way (iframe cannot since cross domain) to auto login into my Alfresco. My web

Re: Login To Alfresco API

afaust — Thu, 05 Jul 2018 13:57:31 GMT

You cannot use tickets obtained from /alfresco to authenticate against /share. Alfresco Share does by default not support ticket based authentication.

If you need some form of auto-login, you should look into setting up external authentication via CAS or similar.

Re: Login To Alfresco API

coisox — Fri, 06 Jul 2018 00:51:36 GMT

Thank you for your clarification. Actually I'm trying to avoid that route (CAS, SSO, LDAP) but it seems I have no other option

BTW, you did say "cannot use tickets obtained from /alfresco to authenticate against /share". Does this means, beside "share", I can put content into normal Alfresco so that I can get it using ticket?

Re: Login To Alfresco API

afaust — Fri, 06 Jul 2018 09:46:30 GMT

If you have obtained a ticket from /alfresco you can use other ReST APIs on /alfresco to interact with the content of the system using the ticket as your authentication token. You can also use the ticket via CMIS using the special user name "ROLE_TICKET" and the ticket as the password.

Re: Login To Alfresco API

coisox — Sat, 07 Jul 2018 19:23:11 GMT

Sorry sir I'm lost here when you said "ReST APIs on /alfresco". What is this called if its not REST API? It does contain the word "/alfresco"

https://mydomain/share/proxy/alfresco/slingshot/node/content/workspace/SpacesStore

Re: Login To Alfresco API

coisox — Sat, 07 Jul 2018 19:26:59 GMT

Oh I think I got what you mean. "/alfresco" right after the domain name. Right?

Re: Login To Alfresco API

afaust — Sun, 08 Jul 2018 20:46:53 GMT

Correct. The /share/proxy/alfresco is just a redirect via the Share application using the Share authentication (which does not support tickets itself).