Hi Christian and Mauro
We are using the leaflet and Angular based client side app which
communicates with spatial data through C# API.
Identity server (a C# based API) matches the email id and password from
identity storage and calls ArcGIS server get token service with a generic
username, password and referer (essentially we are calling this from
server side API (used as proxy server for intial request) and generating an
authentication token). and this token is used for all the communication
between user and arcgis server until token expired for the session. So we
don't need to store any credential on client side code. In this scenario,
tokens are unique for a user's session.
Geoserver can be configured for a key or encrypted password but I am trying
to explore an option where we can have some sort of session password with
some sort of expiration / validation of referer. We don't want to move all
the users to geoserver currently.
Please advise if something is not clear.
Thanks
On Sun, Jan 10, 2016 at 9:46 AM, Christian Mueller <
[email protected]> wrote:
> Hi
>
> I am a little bit confused about your architecture. Which identiy API and
> product are you using ?
>
> Cheers
> Christian
>
> On Wed, Jan 6, 2016 at 8:27 PM, Deepti Puri <[email protected]>
> wrote:
>
>> Hi there
>>
>> Just learning about Geoserver - I have a multi-tenant web mapping
>> application running on ArcGIS server which I am trying to replace with
>> geoserver. Identity of the users for tenants are maintained through another
>> identity api. After successful login Api generates the session token
>> through get token service for a user passing the fixed credentials.
>> Geoserver provides Digest and http header method- but is there a way to
>> generate unique tokens for every session- so that no information related to
>> user authentication is hard coded in client side code. Thanks
>>
>>
>> ------------------------------------------------------------------------------
>>
>> _______________________________________________
>> Geoserver-users mailing list
>> [email protected]
>> https://lists.sourceforge.net/lists/listinfo/geoserver-users
>>
>>
>
>
> --
> DI Christian Mueller MSc (GIS), MSc (IT-Security)
> OSS Open Source Solutions GmbH
>
>
------------------------------------------------------------------------------
Site24x7 APM Insight: Get Deep Visibility into Application Performance
APM + Mobile APM + RUM: Monitor 3 App instances at just $35/Month
Monitor end-to-end web transactions and take corrective actions now
Troubleshoot faster and improve end-user experience. Signup Now!
http://pubads.g.doubleclick.net/gampad/clk?id=267308311&iu=/4140
_______________________________________________
Geoserver-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/geoserver-users