You are viewing a plain text version of this content. The canonical link for it is here.
Posted to jetspeed-user@portals.apache.org by Mansour Al Akeel <ma...@gmail.com> on 2011/08/30 04:32:49 UTC
Credentials for remote web service
We have many web services that takes the user name and password as
parameters. I need to write portlets to display the results for each web
service. I am not sure about the best way to store these credentials.
I can not use portlet prefrence, because there are many portlets. So it
looks silly to enter the username/password as a prefrence for each of
them, and modify them, when the remote system creadentials change.
Any idea?
---------------------------------------------------------------------
To unsubscribe, e-mail: jetspeed-user-unsubscribe@portals.apache.org
For additional commands, e-mail: jetspeed-user-help@portals.apache.org
Re: Credentials for remote web service
Posted by Mansour Al Akeel <ma...@gmail.com>.
Hello David,
I didn't look deeply into this option. My understanding it supports
basic, form, and cookies authentications.
Here are the pages I looked into
http://portals.apache.org/jetspeed-2/deployguide/config-sso.html
I found the closest thing to what I want is CAS filter. But again, the
authentication in the system I need to connect is done by passing
credentials with each call, so this may not work, and still I don't know
where to store the credentials.
I am looking now at the javadoc for SSO. I am not sure if there's
introductory examples. In all cases, I will continue looking at these
doc.
Thank you.
On Mon Aug 29,2011 08:24 pm, David Taylor wrote:
> Well there are init-parameters, but they are not secured. Have you
> looked at using the Jetspeed SSO API?
>
> http://portals.apache.org/jetspeed-2/apidocs/org/apache/jetspeed/sso/package-summary.html
>
> Also look at the SSO Administrative Portlet for examples of using the API
>
> http://portals.apache.org/jetspeed-2/adminguide/sso.html
>
> On Mon, Aug 29, 2011 at 7:32 PM, Mansour Al Akeel
> <ma...@gmail.com> wrote:
> > We have many web services that takes the user name and password as
> > parameters. I need to write portlets to display the results for each web
> > service. I am not sure about the best way to store these credentials.
> >
> > I can not use portlet prefrence, because there are many portlets. So it
> > looks silly to enter the username/password as a prefrence for each of
> > them, and modify them, when the remote system creadentials change.
> >
> >
> > Any idea?
> >
> >
> >
> >
> > ---------------------------------------------------------------------
> > To unsubscribe, e-mail: jetspeed-user-unsubscribe@portals.apache.org
> > For additional commands, e-mail: jetspeed-user-help@portals.apache.org
> >
> >
>
>
>
> --
> David
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: jetspeed-user-unsubscribe@portals.apache.org
> For additional commands, e-mail: jetspeed-user-help@portals.apache.org
>
---------------------------------------------------------------------
To unsubscribe, e-mail: jetspeed-user-unsubscribe@portals.apache.org
For additional commands, e-mail: jetspeed-user-help@portals.apache.org
Re: Credentials for remote web service
Posted by Mansour Al Akeel <ma...@gmail.com>.
On Mon Aug 29,2011 10:24 pm, David Taylor wrote:
> On Mon, Aug 29, 2011 at 9:09 PM, Mansour Al Akeel
> <ma...@gmail.com> wrote:
> > David,
> > I missed the part about init-param. I am not sure, how to set them. My
> > understanding they are set in the portlet.xml file ! Could they be
> > specific for each user ?
>
> init-params are not specific for each user.
That's what I know. If they are not specific for each user, how can I
use them to store credentials specific to users ?
With regard to using SSO API, I looked around, but could find a way to
start. Can you please kindly elaborate on implementing auth and storing
credentials for remote webservices using SSO API ?
Thank you
>
> >
> >
> >
> >
> > On Mon Aug 29,2011 08:24 pm, David Taylor wrote:
> >> Well there are init-parameters, but they are not secured. Have you
> >> looked at using the Jetspeed SSO API?
> >>
> >> http://portals.apache.org/jetspeed-2/apidocs/org/apache/jetspeed/sso/package-summary.html
> >>
> >> Also look at the SSO Administrative Portlet for examples of using the API
> >>
> >> http://portals.apache.org/jetspeed-2/adminguide/sso.html
> >>
> >> On Mon, Aug 29, 2011 at 7:32 PM, Mansour Al Akeel
> >> <ma...@gmail.com> wrote:
> >> > We have many web services that takes the user name and password as
> >> > parameters. I need to write portlets to display the results for each web
> >> > service. I am not sure about the best way to store these credentials.
> >> >
> >> > I can not use portlet prefrence, because there are many portlets. So it
> >> > looks silly to enter the username/password as a prefrence for each of
> >> > them, and modify them, when the remote system creadentials change.
> >> >
> >> >
> >> > Any idea?
> >> >
> >> >
> >> >
> >> >
> >> > ---------------------------------------------------------------------
> >> > To unsubscribe, e-mail: jetspeed-user-unsubscribe@portals.apache.org
> >> > For additional commands, e-mail: jetspeed-user-help@portals.apache.org
> >> >
> >> >
> >>
> >>
> >>
> >> --
> >> David
> >>
> >> ---------------------------------------------------------------------
> >> To unsubscribe, e-mail: jetspeed-user-unsubscribe@portals.apache.org
> >> For additional commands, e-mail: jetspeed-user-help@portals.apache.org
> >>
> >
> > ---------------------------------------------------------------------
> > To unsubscribe, e-mail: jetspeed-user-unsubscribe@portals.apache.org
> > For additional commands, e-mail: jetspeed-user-help@portals.apache.org
> >
> >
>
>
>
> --
> David
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: jetspeed-user-unsubscribe@portals.apache.org
> For additional commands, e-mail: jetspeed-user-help@portals.apache.org
>
---------------------------------------------------------------------
To unsubscribe, e-mail: jetspeed-user-unsubscribe@portals.apache.org
For additional commands, e-mail: jetspeed-user-help@portals.apache.org
Re: Credentials for remote web service
Posted by Mansour Al Akeel <ma...@gmail.com>.
David,
I think, the easiest way is to keep the credentials in the
PortletSession. The question here is how to persist it ?
Another option is user attributes. But then I have to declare it for
each portlet application. Is that right ?
On Mon Aug 29,2011 10:24 pm, David Taylor wrote:
> On Mon, Aug 29, 2011 at 9:09 PM, Mansour Al Akeel
> <ma...@gmail.com> wrote:
> > David,
> > I missed the part about init-param. I am not sure, how to set them. My
> > understanding they are set in the portlet.xml file ! Could they be
> > specific for each user ?
>
> init-params are not specific for each user.
>
> >
> >
> >
> >
> > On Mon Aug 29,2011 08:24 pm, David Taylor wrote:
> >> Well there are init-parameters, but they are not secured. Have you
> >> looked at using the Jetspeed SSO API?
> >>
> >> http://portals.apache.org/jetspeed-2/apidocs/org/apache/jetspeed/sso/package-summary.html
> >>
> >> Also look at the SSO Administrative Portlet for examples of using the API
> >>
> >> http://portals.apache.org/jetspeed-2/adminguide/sso.html
> >>
> >> On Mon, Aug 29, 2011 at 7:32 PM, Mansour Al Akeel
> >> <ma...@gmail.com> wrote:
> >> > We have many web services that takes the user name and password as
> >> > parameters. I need to write portlets to display the results for each web
> >> > service. I am not sure about the best way to store these credentials.
> >> >
> >> > I can not use portlet prefrence, because there are many portlets. So it
> >> > looks silly to enter the username/password as a prefrence for each of
> >> > them, and modify them, when the remote system creadentials change.
> >> >
> >> >
> >> > Any idea?
> >> >
> >> >
> >> >
> >> >
> >> > ---------------------------------------------------------------------
> >> > To unsubscribe, e-mail: jetspeed-user-unsubscribe@portals.apache.org
> >> > For additional commands, e-mail: jetspeed-user-help@portals.apache.org
> >> >
> >> >
> >>
> >>
> >>
> >> --
> >> David
> >>
> >> ---------------------------------------------------------------------
> >> To unsubscribe, e-mail: jetspeed-user-unsubscribe@portals.apache.org
> >> For additional commands, e-mail: jetspeed-user-help@portals.apache.org
> >>
> >
> > ---------------------------------------------------------------------
> > To unsubscribe, e-mail: jetspeed-user-unsubscribe@portals.apache.org
> > For additional commands, e-mail: jetspeed-user-help@portals.apache.org
> >
> >
>
>
>
> --
> David
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: jetspeed-user-unsubscribe@portals.apache.org
> For additional commands, e-mail: jetspeed-user-help@portals.apache.org
>
---------------------------------------------------------------------
To unsubscribe, e-mail: jetspeed-user-unsubscribe@portals.apache.org
For additional commands, e-mail: jetspeed-user-help@portals.apache.org
Re: Credentials for remote web service
Posted by David Taylor <da...@gmail.com>.
On Mon, Aug 29, 2011 at 9:09 PM, Mansour Al Akeel
<ma...@gmail.com> wrote:
> David,
> I missed the part about init-param. I am not sure, how to set them. My
> understanding they are set in the portlet.xml file ! Could they be
> specific for each user ?
init-params are not specific for each user.
>
>
>
>
> On Mon Aug 29,2011 08:24 pm, David Taylor wrote:
>> Well there are init-parameters, but they are not secured. Have you
>> looked at using the Jetspeed SSO API?
>>
>> http://portals.apache.org/jetspeed-2/apidocs/org/apache/jetspeed/sso/package-summary.html
>>
>> Also look at the SSO Administrative Portlet for examples of using the API
>>
>> http://portals.apache.org/jetspeed-2/adminguide/sso.html
>>
>> On Mon, Aug 29, 2011 at 7:32 PM, Mansour Al Akeel
>> <ma...@gmail.com> wrote:
>> > We have many web services that takes the user name and password as
>> > parameters. I need to write portlets to display the results for each web
>> > service. I am not sure about the best way to store these credentials.
>> >
>> > I can not use portlet prefrence, because there are many portlets. So it
>> > looks silly to enter the username/password as a prefrence for each of
>> > them, and modify them, when the remote system creadentials change.
>> >
>> >
>> > Any idea?
>> >
>> >
>> >
>> >
>> > ---------------------------------------------------------------------
>> > To unsubscribe, e-mail: jetspeed-user-unsubscribe@portals.apache.org
>> > For additional commands, e-mail: jetspeed-user-help@portals.apache.org
>> >
>> >
>>
>>
>>
>> --
>> David
>>
>> ---------------------------------------------------------------------
>> To unsubscribe, e-mail: jetspeed-user-unsubscribe@portals.apache.org
>> For additional commands, e-mail: jetspeed-user-help@portals.apache.org
>>
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: jetspeed-user-unsubscribe@portals.apache.org
> For additional commands, e-mail: jetspeed-user-help@portals.apache.org
>
>
--
David
---------------------------------------------------------------------
To unsubscribe, e-mail: jetspeed-user-unsubscribe@portals.apache.org
For additional commands, e-mail: jetspeed-user-help@portals.apache.org
Re: Credentials for remote web service
Posted by Mansour Al Akeel <ma...@gmail.com>.
David,
I missed the part about init-param. I am not sure, how to set them. My
understanding they are set in the portlet.xml file ! Could they be
specific for each user ?
On Mon Aug 29,2011 08:24 pm, David Taylor wrote:
> Well there are init-parameters, but they are not secured. Have you
> looked at using the Jetspeed SSO API?
>
> http://portals.apache.org/jetspeed-2/apidocs/org/apache/jetspeed/sso/package-summary.html
>
> Also look at the SSO Administrative Portlet for examples of using the API
>
> http://portals.apache.org/jetspeed-2/adminguide/sso.html
>
> On Mon, Aug 29, 2011 at 7:32 PM, Mansour Al Akeel
> <ma...@gmail.com> wrote:
> > We have many web services that takes the user name and password as
> > parameters. I need to write portlets to display the results for each web
> > service. I am not sure about the best way to store these credentials.
> >
> > I can not use portlet prefrence, because there are many portlets. So it
> > looks silly to enter the username/password as a prefrence for each of
> > them, and modify them, when the remote system creadentials change.
> >
> >
> > Any idea?
> >
> >
> >
> >
> > ---------------------------------------------------------------------
> > To unsubscribe, e-mail: jetspeed-user-unsubscribe@portals.apache.org
> > For additional commands, e-mail: jetspeed-user-help@portals.apache.org
> >
> >
>
>
>
> --
> David
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: jetspeed-user-unsubscribe@portals.apache.org
> For additional commands, e-mail: jetspeed-user-help@portals.apache.org
>
---------------------------------------------------------------------
To unsubscribe, e-mail: jetspeed-user-unsubscribe@portals.apache.org
For additional commands, e-mail: jetspeed-user-help@portals.apache.org
Re: Credentials for remote web service
Posted by David Taylor <da...@gmail.com>.
Well there are init-parameters, but they are not secured. Have you
looked at using the Jetspeed SSO API?
http://portals.apache.org/jetspeed-2/apidocs/org/apache/jetspeed/sso/package-summary.html
Also look at the SSO Administrative Portlet for examples of using the API
http://portals.apache.org/jetspeed-2/adminguide/sso.html
On Mon, Aug 29, 2011 at 7:32 PM, Mansour Al Akeel
<ma...@gmail.com> wrote:
> We have many web services that takes the user name and password as
> parameters. I need to write portlets to display the results for each web
> service. I am not sure about the best way to store these credentials.
>
> I can not use portlet prefrence, because there are many portlets. So it
> looks silly to enter the username/password as a prefrence for each of
> them, and modify them, when the remote system creadentials change.
>
>
> Any idea?
>
>
>
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: jetspeed-user-unsubscribe@portals.apache.org
> For additional commands, e-mail: jetspeed-user-help@portals.apache.org
>
>
--
David
---------------------------------------------------------------------
To unsubscribe, e-mail: jetspeed-user-unsubscribe@portals.apache.org
For additional commands, e-mail: jetspeed-user-help@portals.apache.org