I need to access and show documents in the browser (jsf application with apache chemistry 0.8 client) which are stored in alfresco. With the old cmis url (alfresco/service/….), I generated a ticket for the user and appended it to the url the cmis client api returned. However, after changing it to the new one 'alfresco/cmisatom', appending the ticket to the retrieved URL does no longer work. I found a workaround where I could add a username 'ROLE_TICKET' and the ticket as password in the beginning of the URL 'http://ROLE_TICKET:ticket@localhost:8080/alfresco/' which works fine in google chrome and firefox. However in IE10 it does not work due to security reasons which is quite blocking.
I did a nasty workaround where I copy the document id from the cmisatom URL to an old url where appending the ticket still works. However this method is quite silly and as the old url is depreciated, i will face the same problem in future.
Does anybody know how I can or should change this ?
Why not write a proxy servlet. The user clicks a friendly download URL, which is your servlet. Your servlet grabs the object ID (or whatever unique ID you are using) and the user credentials or token you've already got in your session. The servlet can use the ticket in the username and password when it gets the session with the server, as you've already discovered. The servlet then downloads the file from the repo and streams the download to the browser.
I'm having this same issue. Seems like it should be very simple to hit a content URL and provide a ticket, but I can't seem to get it to work. Is the proxy servlet the best way to link to content using existing credentials?
