nav[aria-label="Primary Navigation"] { padding: 0; & ul { list-style: none; width: 100%; display: flex; flex-direction: row; justify-content: start; align-items: start; gap: 30px; padding: 0; & li { margin: 0; } & ul li { list-style: none; } } }

As we transition to the new Hyland Community, some post links may be temporarily disrupted as we finalize redirects. We apologize for the inconvenience and are working to resolve this as quickly as possible. Details.

loginticket built in web service

tsgpartner_mui

I was wondering how the loginticket built-in web script works.

Just by playing with it, I'm not quite sure what it is doing behind the scenes. Correct me if I'm wrong.   But to my understanding, it calls two different methods - delete and get. Both Having the same exact url, I believe the loginticket.delete.desc.xml is calling the loginticket.get.desc.xml to get the ticket which was entered in the url by the user, and then it deletes that ticket, which finally gives the user a 404 error, "ticket not found."

So for instance, I used the "login" built-in web service to establish a ticket. Then, I used that ticket to be passed into the loginticket url. When I tested this out with different users and passwords and with /alfresco/service/ or /alfresco/wcservice, I got mixed results. Sometimes using the loginticket service, I was given the 404 error, which is suppose to happen, since to my understanding, thats the message to know that you have deleted the session.   And then, sometimes it would result to the ticket displayed in the xml ftl response template, which would mean, it didnt get deleted, but its still valid, right? What I think is the cause could be the user I was logged as into in alfresco…

Anyway, what I want to do is to have two services that uses javascript:

1) would check if a particular session is still valid and

2) delete a particular session.   Again, to my understanding, the delete session ticket is already provided built in.

And what I thought I could do is use the code similar to the "get" part of the loginticket service, but call the service with a different url like:

/sample/validate/ticket/{ticket}‍

.

But that didn't seem to work, giving me a 500 error stating a line of code in my xml ftl is undefined. The ftl file is basically the same as the loginticket.get.xml.ftl

Any input would be appreciated.

Thanks.

Find more posts tagged with

Comments

tsgpartner_mui

actually searchin through some prior forum posts, i might need to call teh loginticket.delete through java. because the delete service doesnt work in my opinion. i will have to play with this.

tsgpartner_mui

for the loginticket.get and loginticket.delete web scripts,

SInce these scripts are java-backed, Is there documentation of the java source files these scripts refer to? I'm curious to see how the code works for each one. I tried looking for it in alfresco and the wiki.

Thanks

davidc

This is all documented in the WIKI - I suggest you take some time to learn the conventions for tying a java class to a web script.

http://wiki.alfresco.com/wiki/Web_Scripts#Java-backed_Web_Scripts

For a given Web Script you can get everything you need to know about it via the following Alfresco server URL…

http://localhost:8080/alfresco/service/script/{serviceId}

where

{serviceId} = the full id of the web script

e.g. for login.get, use

http://localhost:8080/alfresco/service/script/org/alfresco/repository/loginticket.get

This will tell you the backing java class amongst other things.

e.g.

…
Get Login Ticket
…
Authentication:   user
Transaction:   required
Method:   GET
URL Template:   /api/login/ticket/{ticket}
Format Style:   any
Default Format:   xml
Implementation:   class org.alfresco.repo.web.scripts.bean.LoginTicket
…

You can also look in web-scripts-application-context.xml for the web script bean definition and implementation class.

tsgpartner_mui

If you didnt check the other discussion I was having with you in the other forum, I was able to bind my webscript succesfully.

And I have looked at the web-scripts-application-context.xml before.

I was looking for the java code/jar file that runs these files? I know they're built in but is the code available to look at

davidc

From the front page of the WIKI http://wiki.alfresco.com/wiki/ …

Source Downloads

    * Alfresco SDK http://wiki.alfresco.com/wiki/Alfresco_SDK
    * Subversion Access http://wiki.alfresco.com/wiki/Alfresco_SVN_Development_Environment
    * Browse SVN Head http://svn.alfresco.com/repos/alfresco-open-mirror

Whichever of the above you choose, search for the file called LoginTicket.java

tsgpartner_mui

Thank you, that's what I am looking for.

I don't know if you read the earlier post (the first one I posted here) in this forum. Maybe you can provide your insight.

How does the loginticket.get and loginticket.delete work? Still confused. Do they work together? or seperately? Seems like they work together because for delete to work, it has to use a 'get' method… not sure however

I'm trying to test out it but doesn't give me the results I'm looking for.

For example, referring to the java code, one of the first checks is to see if someone entered a ticket, so it should return a bad request, "Ticket Not Specified". However when testing, it returns a 404, Ticket not found, when you do not provide one.

I might be getting confused, since hitting the webscripts through URL, you're already logged in alfresco as an user. Are there more than one session? Please help clarify.

For example, I'm logged as admin in alfresco and using the login web script, I have a ticket from passing u=admin, pw=admin.

But when I try to delete that ticket, it returns the same ticket in xml format response.

Then I try to delete a ticket which was provided from passing through a different user and password (from login web script) than 'admin'. The result is that I get a 404, ticket not found. And if delete is successful, shouldn't there be a status message stating "Deleted Ticket" + provided Ticket" ??? I have not ever seen this message yet in my testing.

davidc

Please provide the exact set of urls you're issuing - then we can attempt to reproduce.

Also, please provide whether you're using a browser or java or some other client for your own testing.

tsgpartner_mui

Testing simply with a browser, firefox.

TEST A
1. Login with admin: http://localhost:8080/alfresco/service/api/login?u=admin&pw=admin

result: <ticket>TICKET_a2148fee37e8cb2c274a2e4f81c390d9ea2523ee</ticket>

2. Delete ticket:
http://localhost:8080/alfresco/service/api/login/ticket/TICKET_a2148fee37e8cb2c274a2e4f81c390d9ea2523ee

result: <ticket>TICKET_a2148fee37e8cb2c274a2e4f81c390d9ea2523ee</ticket>

TEST B
1. Login with user 'mark':
http://localhost:8080/alfresco/service/api/login?u=mark&pw=demo

result: <ticket>TICKET_dfe6f3e43362f17daa81f36587899c1fab9383ba</ticket>

2. Delete ticket:
http://localhost:8080/alfresco/service/api/login/ticket/TICKET_dfe6f3e43362f17daa81f36587899c1fab9383ba

result:

<response>
Ã¢Ë†â€™
<status>

404‍

<name>Not Found</name>
<description>Requested resource is not available.</description>
</status>
<message>Ticket not found</message>
<exception/>
<callstack>
</callstack>
<server>Alfresco Enterprise Network v2.1.1 (164) schema 76</server>
<time>Jan 11, 2008 9:23:14 AM</time>
</response>

TEST C
(test for check "Ticket not specified")
1. http://localhost:8080/alfresco/service/api/login/ticket/

result:

<response>
Ã¢Ë†â€™
<status>

404‍

<name>Not Found</name>
<description>Requested resource is not available.</description>
</status>
<message>Ticket not found</message>
<exception/>
<callstack>
</callstack>
<server>Alfresco Enterprise Network v2.1.1 (164) schema 76</server>
<time>Jan 11, 2008 9:33:24 AM</time>
</response>

davidc

TEST A 2. Delete ticket:
http://localhost:8080/alfresco/service/api/login/ticket/TICKET_dfe6f3e43362f17daa81f36587899c1fab9383ba

This is not deleting the ticket, it's just getting it. The browser issues HTTP GET requests. If you want to mimick a DELETE request via the browser, you can append the url argument

alf_method=DELETE‍

TEST B 2. Delete ticket:
http://localhost:8080/alfresco/service/api/login/ticket/TICKET_dfe6f3e43362f17daa81f36587899c1fab9383ba

Again this is not a delete. However, were you asked to login. If so, did you enter TICKET_dfe6f3e43362f17daa81f36587899c1fab9383ba into the username of the login box (password is left blank). If not, then you'll get a not found for the ticket, as the get ticket web script only allows the owner to see it. The delete ticket web script behaves the same way.

tsgpartner_mui

I tried doing the append for delete

http://localhost:8080/alfresco/service/api/login/ticket/TICKET_49c9ef4623ea00d3d6c5085c25bd477a7936aa4a?alf_method=DELETE

still results in Ticket Not Found, shouldnt it return "Deleted ticket…"

And I tried entering the ticket for username if the box appear. But it still returned the Ticket Not Found message.

davidc

ok, let me try.

tsgpartner_mui

Also testing it numerous times,

Ive come to realize that for the append,

at times it returns, Ticket Not Found, and then sometimes it returns, the same ticket in xml response. This happens for admin and mark users.

I dont if its cacheing, but I closed the browser, and opened a new one. These results still occur.

davidc

Ok, the alf_method argument is only respected on POST. Not sure why it's like that, I just coded it that way at the time.

So, to test properly you'll need a html form to POST, or use another client like CURL to test.

I'll fix up alf_method so it's respected on GET too.

tsgpartner_mui

Alright, let me know when you get it respected on get.

So once you fix that, then you will be able to append it with alf_method=DELETE.

davidc

A check-in has gone into HEAD today.

http://wiki.alfresco.com/wiki/Web_Scripts#HTTP_Method_Tunneling