Skip to main content
[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index] [List Home]
Re: [lyo-dev] [EXTERNAL] Re: Proxy for OSLC UI Preview 
Thanks, Mike and Maeve.
After fighting with proxies and OAuth headers and all that kind of stuff, and trying to figure out why even though I (think) passed the right headers it was still redirecting me to the login screen, I figured out a different way of doing things. Specifically, rather than having the JQuery popup directly show the preview url, I have the popup show an asp.net page, which loads the preview url in an iframe. That seems to be a valid way to deal with the cross-doman javascript issue, and even follows the OSLC guidelines (which specify that the consumer must use an iframe). 

Good enough for now, I think.

-bob


On 5/3/2016 7:29 AM, Michael Fiedler wrote:
It has been a while since I was hands-on with the OSLC oauth and proxy issues, but I think you are on the right track. If your proxy can pass through the headers and correctly respond to any SC_FORBIDDEN/SC_UNAUTHORIZED challenges from the server you might be ok. Others with more recent experience with how other OSLC implementers such as the IBM Rational products do it can chime in if I am off base.
For the exact headers and flow, you might get some help from: https://www.youtube.com/watch?v=kcEjftQA-LU
There is a simple proxy example is in the Bugzilla workshop, but it is probably not useful since it is proxy-ing to a a Bugzilla server using basic auth as opposed to a DOORS server in your example, but just in case: http://git.eclipse.org/c/lyo/org.eclipse.lyo.docs.git/tree/ninacrm/src/main/java/org/eclipse/lyo/samples/ninacrm/ProxyServlet.java 

Regards,
Mike
On Mon, May 2, 2016 at 4:40 PM, Robert Kerr <rakerr@xxxxxxxxxx <mailto:rakerr@xxxxxxxxxx>> wrote: 

    Hi,
    I'm working on implementing the OSLC Preview mechanism and have
    hit the Same Origin Policy problem with showing the preview.

    I can retrieve the URL for the preview, and can even show the
    preview icon, but my jQuery popup won't show the Preview URL,
    because DOORS is hosted on a different system.

    So far I've got a simple proxy involved, which seems to be working
    all right for simple proxy queries, but the authentication isn't
    being transferred through the proxy. It seems to me that since my
    user has already done the OAuth dance, and I've stored all that
    authentication in the JazzOAuthClient class, and all the direct
    links to DOORS work fine, I should just be able to add the
    necessary OAuth credentials to the Headers which get passed
    through the proxy to enable the preview.  Am I correct in thinking
    this?  Which headers are needed?  I've been trying to sniff the
    traffic to see, but it shows me that on previous successful
    request there are only the oauth_token and the oauth_verifier
    headers.  And neither of those is stored in my JazzOAuthClient class.

    Any help would be appreciated, thanks.

    And, in case it makes any difference, I'm doing this in ASP.NET
    <http://ASP.NET>, with the (presumably) abandoned OSLC4NET libraries.
-- -bob 

    "Outlook not so good." That magic 8-ball knows everything!
    I'll ask about PowerPoint next.
    **********************************************************************
    *      Robert Kerr - Engineering Solutions Software Developer        *
    * rakerr@xxxxxxxxxx <mailto:rakerr@xxxxxxxxxx>         |    PO Box
    5800,  MS 0125         *
* Phone: (505) 844-8606 <tel:%28505%29%20844-8606> | Sandia National Labs * * Fax: (505) 844-2018 <tel:%28505%29%20844-2018> | Albuquerque, NM 87185-0125 * 
    **********************************************************************

    _______________________________________________
    lyo-dev mailing list
    lyo-dev@xxxxxxxxxxx <mailto:lyo-dev@xxxxxxxxxxx>
    To change your delivery options, retrieve your password, or
    unsubscribe from this list, visit
    https://dev.eclipse.org/mailman/listinfo/lyo-dev




_______________________________________________
lyo-dev mailing list
lyo-dev@xxxxxxxxxxx
To change your delivery options, retrieve your password, or unsubscribe from this list, visit
https://dev.eclipse.org/mailman/listinfo/lyo-dev


--
-bob

If your clothes are full of static cling does that mean you are a
very attractive individual?
**********************************************************************
*      Robert Kerr - Engineering Solutions Software Developer        *
*      rakerr@xxxxxxxxxx          |    PO Box 5800,  MS 0125         *
*      Phone: (505) 844-8606      |    Sandia National Labs          *
*       Fax: (505) 844-2018       |  Albuquerque, NM 87185-0125      *
**********************************************************************

Back to the top