Eclipse Community Forums: Eclipse Scout » Different ways to authenticate within the application

Home

Home » Eclipse Projects » Eclipse Scout » Different ways to authenticate within the application

Different ways to authenticate within the application [message #1645501]

Mon, 02 March 2015 09:49

Eclipse User

Hello there,

right now I have the requirement to provide 2 differents kinds of login for my app.

a regular form based login: this a topic of another thread. But if I know more, I'll post the solution here as well.
a call from an external web application: a user from an external application is already authenticated there and will see a link to my application. eg. http://my.server.com/externallogin?userhash=.....
What do I have to do, that first of all the /externallogin will be handled own its own? A specific servlet filter? How do I have to register this servlet filter? In the RAP bundle or in the server bundle? And how can I then redirect to my app without being transfered to the form based login?

Thanks in advance.

Peter

Re: Different ways to authenticate within the application [message #1646944 is a reply to message #1645501]

Tue, 03 March 2015 02:12

Eclipse User

I can't help you with your second issue of single sign on. However, I can give you some pointers to your first issue.

First off, you'll probably want to look at the SecurityConcept page to understand how authentication with Scout works.

In order for login data to be requested and verified you will need some sort of security filter. Scout provides a data source security filter (however, it's implementation of using base64 encoding to "encrypt" the passwords is far from recommendable). In a corporate environment you're likely to need to interact with an LDAP server, this is described by the following article.

Activating this filter will make the default login dialog appear. It is possible to extend this, as described in this article.

I hope this gives you some pointers on how to do form based login.

Re: Different ways to authenticate within the application [message #1646952 is a reply to message #1646944]

Tue, 03 March 2015 02:19

Eclipse User

Hi Urs,

'm not sure if the information in the article "Extending the login dialog" is valid anymore. Since I'm using the Mars release with a RAP client and in the first sentence it also says:

Quote:

This how-to describes how to extend the standard login dialog. It is limited to the SWT client but the same principle applies when extending the login dialog for the Swing client.

So its just for SWT and Swing. Not for RAP. There is another topic in the form https://www.eclipse.org/forums/index.php/t/821196/ where a form based login is describes. But at a point there is a web.xml needed, which I can't find in my whole workspace....

Peter

Re: Different ways to authenticate within the application [message #1649113 is a reply to message #1646952]

Wed, 04 March 2015 01:51

Eclipse User

Sorry, I had missed the bit in your OP where you mentioned RAP. I've never done much work with the RAP client, so I'm not sure if the client side code for logging in is similar to the SWT way or not (often RAP and SWT code is pretty close, so it might be worth taking a look, just in case).

Re: Different ways to authenticate within the application [message #1649444 is a reply to message #1649113]

Wed, 04 March 2015 05:21

Eclipse User

No problem at all. Right now I'm able either to login via a webservice and via a login box.

The login box should be replaced with a form based login. This is the only thing I missing right now.

Previous Topic:	Accessing Services in a Servlet
Next Topic:	Opening a MessageBox on form load.

Goto Forum:

-=] Back to Top [=-

Current Time: Mon Jul 21 11:26:51 EDT 2025

.:: Contact :: Home ::.

Breadcrumbs

Sign up to our Newsletter