More specifically I was
wondering if it’s possible to pass in this URL
http://localhost:8080/drools-guvnor/
securityService?username=admin&password=admin
Is it possible to do this. From
my research it seems to be that there is a seam authentication filter that
needs to be bypassed. Does anyone have any ideas on this. Please let me
know
Thanks,
From:
rules-users-bounces@lists.jboss.org
[mailto:rules-users-bounces@lists.jboss.org] On Behalf Of Swindells,
Thomas
Sent: Friday, June 18, 2010 4:23 AM
To: Rules Users List
Subject: Re: [rules-users] HELP Drools Guvnor
What you are asking
for is incredibly insecure and bad for so many reasons...
If you really want to
be passing around your passwords in the url for anybody to see then what you
may be able to do is to use the standard http method of embedding the
credentials:
http://user:password@localhost:8080/drools-guvnor/mylinktoguvnor
This would then use
standard http authentication with the webserver guvnor is installed
within. You would then configure guvnor to use its containers security to
perform the authentication.
The guvnor docs may
give you some hints where to start.
http://downloads.jboss.com/drools/docs/5.0.1.26597.FINAL/drools-guvnor/html_single/index.html#d0e149
Thomas
From:
rules-users-bounces@lists.jboss.org
[mailto:rules-users-bounces@lists.jboss.org] On Behalf Of Baig, Kaleem
Sent: 17 June 2010 21:04
To: rules-users@lists.jboss.org
Subject: [rules-users] HELP Drools Guvnor
I have been able to create users for Guvnor as admin and
guest.
But what I want is, instead of going to the login form http://localhost:8080/drools-guvnor/org.drools.guvnor.Guvnor/Guvnor.html
I should be able to pass in the
username and password through a query string.
Such as shown below:
http://localhost:8080/drools-guvnor/mylinktoguvnor?username=admin&password=admin
Is there a way to do this, please
let me know.
**************************************************************************************
This message is confidential and intended only for the addressee. If you have
received this message in error, please immediately notify the postmaster@nds.com
and delete it from your system as well as any copies. The content of e-mails as
well as traffic data may be monitored by NDS for employment and security
purposes. To protect the environment please do not print this e-mail unless
necessary.
NDS Limited. Registered Office: One London Road, Staines, Middlesex, TW18 4EX,
United Kingdom. A company registered in England and Wales. Registered no.
3080780. VAT no. GB 603 8808 40-00
**************************************************************************************
This E-Mail has been scanned for viruses.