'401 Unauthorized' when accessing to webscript from indicator in Alfresco Share

As we transition to the new Hyland Community, some post links may be temporarily disrupted as we finalize redirects. We apologize for the inconvenience and are working to resolve this as quickly as possible. Details.

ardamose123

I have a Share indicator whose evaluator must retrieve the result of an Alfresco webscript.

import org.alfresco.web.evaluator.BaseEvaluator;
import org.json.simple.JSONObject;
import org.springframework.extensions.surf.ServletUtil;
import org.springframework.extensions.surf.exception.ConnectorServiceException;
import org.springframework.extensions.surf.support.ThreadLocalRequestContext;
import org.springframework.extensions.webscripts.connector.Connector;

public class CustomEvaluator extends BaseEvaluator
{
   @Override
   public boolean evaluate(JSONObject node)
   {
      try
      {
         Connector conn = ThreadLocalRequestContext.getRequestContext().getServiceRegistry().getConnectorService().getConnector("alfresco");
         return conn.call("/some/webscript/run?nodeRef=" + (String) node.get("nodeRef")).getResponse().equals("YES");
      }
      catch (ConnectorServiceException ex)
      {
         return false;
      }
   }
}
‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍

However, when the evaluator gets executed, Alfresco returns a 401 Unauthorized HTTP response status code every time.

Other observations:
<ul>
<li>If I try to access the webscript directly from the browser (since it's a simple GET method), it works fine.
<li>If I access the webscript as a Share document library action, it works fine.
<li>In the last two observations, cookies are sent in the HTTP request (JSESSION, something starting with "alf", some PHP-specific). In the evaluator one, no cookies are sent.
</ul>

So, the problem must be in the way I'm trying to access it from an evaluator.

Is there any way to include the authentication information of the current session using the Connector Service to access webscripts which require authentication?

rjohnson

As the evaluators run "inside" Alfresco I suspect that you won't be able to get the cookie (as thats a client side thing) but you should be able to get the ticket and send the ticket number on the URL like &alf_ticket=????????? that should then provide enough authorisation.