Hello

I am using gwt jsonprequestBuilder to invoke a rest service which is hosted 
in a server outside of where gwt client is launched from. Hence the need to 
use the cross-domain api. I am successfully able to invoke the target 
service and get the response I need. My problem is the basic authentication 
dialog that pops up. From my research online, I see that other than passing 
the userid/pwd as part of the url, there is no other way to manipulate the 
request header. Is that true? Passing userid/pwd as part of the url is not 
acceptable in our situation given the obvious security hole. I am surprised 
that there is no way to set the authentication as part of the header. How 
are people using it to access external REST services that are outside the 
gwt client domain? In our implementation, it is not desirable for the user 
to  interact with the pop-up. The authentication has to be handled 
pro-grammatically and securely. I researched restygwt but the user guide is 
dismal with regards to using it with jsonp. Any pointers is greatly 
appreciated.

Regards
BN

-- 
You received this message because you are subscribed to the Google Groups 
"Google Web Toolkit" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to [email protected].
To post to this group, send email to [email protected].
Visit this group at http://groups.google.com/group/google-web-toolkit.
For more options, visit https://groups.google.com/groups/opt_out.

Reply via email to