[Contents] [Prev] [Next] [Index] [Report an Error]

Concealing the Username and Password in a URL

You can provide URLs to JUNOScope operations in your Web application with the username and password added to the URL. You will be directed to the JUNOSCope operation without having to log in using the JUNOScope server login page. (See Figure 21.) However you can choose to conceal the username and password in the URL. (See Figure 22.)

Figure 21: Data Flow with JUNOScope Credentials

Image g016816.gif

Figure 22: Data Flow with JUNOScope Credentials Concealed via HTTP Redirect

Image g016815.gif

To conceal the username and the password in the URL, the HTTP request by the client browser, for the external Web application page with hyperlinks to JUNOScope opertaions should be returned to the client browser with redirect hyperlinks.

You can use the following sample client HTML code to return the HTTP request to the client browser with redirect hyperlinks:

<html>
            <body bgcolor="white">
               <a href='http://<yourServer>:<Port>/redirect?redirectLoc=ui/index/looking-glass'>
Looking Glass</a>
                 <!--
                     replace above <yourServer> with the server name/IP  and <port> with
the port where     the redirect jsp is available.                
                  -->                
             </body>        
       </html>

You can use the sample JSP code below to return the page that will redirect the client browser to JUNOScope, with credentials:

<html>            
          <body bgcolor="white" onLoad="goToJUNOScope();">
             Redirecting to Junoscope.             </body>    
          <Script language="javascript">               
           var logoutRequired= <%=request.getParameter("logoutRequired")%>;
                function goToJUNOScope() {        
                  if( logoutRequired ) {     
    document.all.logoutFrame.src="<%=urlInterface.RedirectHelper.getJUNOScopeServer()%>"+"/jtk/logout";
                }      
                var server = "https://JUNOScopeServer:8443/";
       var userName = 'username';      
       var password = 'password';
      var redirectLoc = '<%=request.getParameter("redirectLoc")%>';
      var fullURL = server+"/jtk/noauth-auth?username="+userName+"&password;="+password+"&redirectLoc;="+redirectLoc;
      window.location = fullURL;
      return false;
     }      
          </Script>
      </html>

[Contents] [Prev] [Next] [Index] [Report an Error]