form-based auth

[katsdiaz]

Would like to add an item to launch a web app that uses form-based authentication, and have atrium pass-on the credentials established with the initial iseries login. I understand that http basic auth and a "request string" are the two supported atrium methods -- but is there some kind of work-around for form-based auth?

[David]

It's not possible to have Atrium perform form-based authentication automatically, but it could be set up with a bit of customization. You could use the "request parmameter" option to have Atrium pass the sign on credentials to a page on the query string. This is passed as parameter name AT_AUTH. The page that is called could then submit a form with the credentials to the application -- assuming that application can accept form data from another page.

[katsdiaz]

The AT_AUTH parameter contains the encrypted credentials. Are you inferring that there's a way to decrypt the string value in order to retrieve the username and password in order to pass-on to a site's form-based auth login page? I'm not quite picturing the whole solution you've suggested.

[David]

The credentials are not encrypted. They are encoded in the HTTP "Basic" format, which is:

user:password

Which is then encoded using the Base64 algorithm. The text is in UTF-8.