Alfresco's "getContent" CMIS REST API [1] supports a proprietary query string parameter [2] that will execute the request as the "guest" user, without requiring any other authentication credentials. Provided the guest user has read access to the file you're trying to retrieve, the call will succeed.
Note that this parameter is not part of the CMIS specification - it's an Alfresco-specific feature that's supported for all Alfresco REST APIs (CMIS or otherwise). Cheers, Peter [1] http://wiki.alfresco.com/wiki/Repository_RESTful_API_Reference#Content_Retrieval_.28getContent.29 [2] http://wiki.alfresco.com/wiki/Web_Scripts#Authenticating (scroll down to the "Guest Access" sub-heading) On Jul 19, 2011, at 7:05 am, Florian Müller wrote: > Hi Christopher, > > There is no way to get the "alf_ticket" through OpenCMIS. You have to use the > Alfresco APIs to request a ticket. > But you shouldn't do that. It opens a security hole. > > Better build a proxy servlet that handles the download through OpenCMIS. > > > - Florian > > > On 19/07/2011 14:57, Christopher Cheng wrote: >> I am using Alfresco as the repository for images of an image gallery >> implemented in Struts. >> The problem is that when the html is presented to the client, I want to pass >> the direct URL of the image like this >> >> <img >> src="http://www.mycompany.com/alfresco/download/direct?path=/CompanyHome/Web >> Projects/Images/fantasy.jpg"/> >> >> Of course this doesn't work because the ticket "alf_ticket" is not in the >> URL and alfresco will take user to the login page. >> >> How could I get the "alf_ticket" with Apache chemistry API? >> >
