Hi Reto and all,

ok so I added authentication to my interface. I had a design in mind that would be most convenient to the user, namely that he sets his login data once and for all, the username and password are then set as global variables, and in each jQuery.ajax call that will be done, the authentication data is sent. I do this for all services, not only the contenthub, because the idea is that access will still work even if the Stanbol people should decide to require authentication on services other than the contenthub in the future.

That seems to work in most cases, but there are a few exceptions where I get a
401 Unauthorized, and a
WWW-Authenticate:Basic realm="Apache Stanbol authentication needed"
in the response header. This error occurs only when I DO send authentication data; access works fine as long as I do NOT try to authorize my access.

The cases where this happens are:
GET on entityhub/sites/referenced/
GET on entityhub/lookup/
POST on ontonet/session/
and when I try to GET all the registered session on the ontonet.

(for the factstore and rules I don't know, since the first is not there presently and the latter does not allow for CORS access.)

Do these services have a different username and password (meaning: different from the default admin-admin that works for the other services)?

Best,
Melanie


Am 08.01.2013 20:13, schrieb Reto Bachmann-Gmür:
Hi Melanie and all

We should discus ehich permission should be needed for the contenthub. As
it allows adding data it shouldn't be allowed to anonymous users.

On the demo server you mention there's currently only the admin user. I
think it would make sense to have a user to test which can access all
services but the system console and another user with priviledges to access
the system console.

Cheers,
Reto

On Wed, Jan 2, 2013 at 12:10 PM, Melanie Reiplinger <
[email protected]> wrote:

Hi Stanbol developers!

(Happy new year, by the way :) )

Suddenly, the contenthub on dev.iks-project.eu:8081/ asks me for a user
name and password. Do you intend to have users of the demo server register
in order to test it? Or is this because auf the in-progress release?


Best,
Melanie


Reply via email to