Re: [Ebxmlrr-tech] ExternalLink URL that requires authentication

[Farrukh S. N. <fa...@we...>]

MICHAEL COOK wrote:
> Hey guys,
>
> I have an internal URL that requires authentication in order to view the page. I was thinking about storing it in an ExternalLink, but I ran into a snag. The Java UI asks for credentials when I give the URL as an ExternalLink. However the Web UI doesn't, and the server throws back an unresolvable URLs error when I try to save the URL by either the Java UI or Web UI. This leads me to believe that the login screen I see through the Java UI is built into Java itself. Is there a mechanism in freebXML that will allow the server to authenticate to the URL when it tries to resolve it? 

I am afraid there is no such means at present. Perhaps in future SAML
may be a solution to this problem.

> I realize I can make the server not try to resolve the URL by setting omar.persistence.rdb.ExternalLinkDAO.checkURLs to false in omar.properties, but I am trying to stay within the ebXML spec if possible.
>
> On a side note, it appears that the Java UI trys to resolve an ExternalLink URL even if omar.persistence.rdb.ExternalLinkDAO.checkURLs is set to false. I don't know if this is a bug.
>   

Hi Michael,

The omar.persistence.rdb.ExternalLinkDAO.checkURLs prop is for the
server code only (as are all props in omar.properties).
Perhaps this should have been in omar-common.properties instead.

I agree that there should be a way to turn on URL Validation in Java UI.
Please file a Request For Enhancement and we will fix it sometime. Thanks.

-- 
Regards,
Farrukh

Web: http://www.wellfleetsoftware.com