Page 1 of 1

form-based auth

Posted: Wed Aug 11, 2010 12:16 am
by katsdiaz
Would like to add an item to launch a web app that uses form-based authentication, and have atrium pass-on the credentials established with the initial iseries login. I understand that http basic auth and a "request string" are the two supported atrium methods -- but is there some kind of work-around for form-based auth?

Re: form-based auth

Posted: Wed Aug 11, 2010 9:01 am
by David
It's not possible to have Atrium perform form-based authentication automatically, but it could be set up with a bit of customization. You could use the "request parmameter" option to have Atrium pass the sign on credentials to a page on the query string. This is passed as parameter name AT_AUTH. The page that is called could then submit a form with the credentials to the application -- assuming that application can accept form data from another page.

Re: form-based auth

Posted: Wed Aug 11, 2010 7:33 pm
by katsdiaz
The AT_AUTH parameter contains the encrypted credentials. Are you inferring that there's a way to decrypt the string value in order to retrieve the username and password in order to pass-on to a site's form-based auth login page? I'm not quite picturing the whole solution you've suggested.

Re: form-based auth

Posted: Tue Aug 17, 2010 8:28 am
by David
The credentials are not encrypted. They are encoded in the HTTP "Basic" format, which is:

user:password

Which is then encoded using the Base64 algorithm. The text is in UTF-8.