nav[aria-label="Primary Navigation"] { padding: 0; & ul { list-style: none; width: 100%; display: flex; flex-direction: row; justify-content: start; align-items: start; gap: 30px; padding: 0; & li { margin: 0; } & ul li { list-style: none; } } }

As we transition to the new Hyland Community, some post links may be temporarily disrupted as we finalize redirects. We apologize for the inconvenience and are working to resolve this as quickly as possible. Details.

Ticket authentication using new OpenCMIS URLs in Alfresco 4

amitp85

Starting with Alfresco 4, the web script based CMIS implementation (http://localhost:8080/alfresco/service/cmis) is deprecated. Where possible, you should use the OpenCMIS implementation instead (http://localhost:8080/alfresco/cmisatom).

In a quick test using curl, I noticed that when a user does not have access to Company Home, the old implementation fails while the new implementation succeeds.

Jeff

Dear Jeff,

How should I authenticate the user to access http://localhost:8080/alfresco/cmisatom ? I've tried sending "alf_ticket" (http://localhost:8080/alfresco/cmisatom?alf_ticket=TICKET_bdbd0697d81a40f782ba8b54615abad21dc663fd) parameter obtained from http://localhost:8080/alfresco/service/api/login?u=username&pw=password. But still cmisatom gives "Authorization Required" error. I'm trying to hit URLs using curl not using any API.

Though HTTP authentication works (curl –user "username

assword" http://localhost:8080/alfresco/cmisatom). But that way I have to send it with each request and alfresco will authenticate user everytime. Is there a similar way to use session token like alf_ticket with cmisatom url ?

Alfresco version: 4.0.c

Regards
Amit

Find more posts tagged with

Comments

jpotts

amitp85,

I don't know, to be honest. I just realized this didn't work this week. I'll ask around. This may take some debugging and some source inspection to figure out whether or not ticket authentication is intended to be supported with the OpenCMIS URLs.

Jeff

amitp85

jeff

Thanks for your reply. This is not a blocker, I appreciate if you can post an update in future.

Regards
Amit

jm_pascal

Hello,

The answer is here : https://issues.alfresco.com/jira/browse/ALF-7074

Ticket can be specified in password, if any of the following are true:

a) username is not specified (i.e. null, or length of zero)
b) username is equal to "ROLE_TICKET" (case insensitive)

Hope it helps

jpotts

Works like a charm…

>>> client = CmisClient('http://localhost:8080/alfresco/cmisatom', '', 'TICKET_e5ce8e2a36af2188dbda30bee4d0633db4605a6c')
>>> repo = client.defaultRepository
>>> repo.id
u'1b8980cc-1f1b-4ac3-b26f-17aeee0cefc9'
>>> repo.name
u'Main Repository'
>>> repo.rootFolder.name
u'Company Home'‍‍‍‍‍‍‍‍

Thanks, Jean-Marie!

Jeff

amitp85

Hello,

The answer is here : https://issues.alfresco.com/jira/browse/ALF-7074

Ticket can be specified in password, if any of the following are true:

a) username is not specified (i.e. null, or length of zero)
b) username is equal to "ROLE_TICKET" (case insensitive)

Hope it helps

ah.. finally.

Its working fine. Thanks a lot.

amitp85

Works like a charm…

>>> client = CmisClient('http://localhost:8080/alfresco/cmisatom', '', 'TICKET_e5ce8e2a36af2188dbda30bee4d0633db4605a6c')
>>> repo = client.defaultRepository
>>> repo.id
u'1b8980cc-1f1b-4ac3-b26f-17aeee0cefc9'
>>> repo.name
u'Main Repository'
>>> repo.rootFolder.name
u'Company Home'‍‍‍‍‍‍‍‍

Thanks, Jean-Marie!

Jeff

Jeff,

Thanks a lot for your help.

r_kubiak

That means, I need to use the not cmis-standard url http://localhost:8080/alfresco/service/api/login?u=username&pw=password to authenticate later against cmis?

Is there any cmis-pure way?

kaynezhang

If you have username and password ,you can just use them to authenticate direclty using OpenCMIS instead of using ticket.There are many examples you can find.

ctan

The "old" URL: http://localhost:8080/alfresco/cmisatom written in http://docs.alfresco.com/5.0/pra/1/tasks/opencmis-ext-workbench.html doesn't seem to work with ticket based authentication on 4.2.x, but the following one does:

http://localhost:8080/alfresco/api/-default-/public/cmis/versions/1.1/atom/ from http://docs.alfresco.com/community/pra/1/concepts/cmis-request-url-format-onpremise.html

Not sure whether this is related but the "old" URL has a pattern /cmisatom that's being intercepted by a "CMIS security context cleaning filter" in web.xml.