User Creds on a URL

A long while back I posted an entry on linking to a report via a URL. All was good but it only worked if you either:

1. Were hooking BIP up to SSO with your calling application or
2. You placed the report in the Guest folder which was unsecured.

Now, back in an earlier release the dev guys sneaked a feature out that I was vaguely aware of and thought I knew but it took the almighty Bryan Wise to remind me. You can now pass the username and password on the URL to avoid the two cases above and open up other possibilities.

You can just add the following parameters to your URL

&id=XXXXXX&passwd=YYYYYY

For example:

http://127.0.0.1:9704/xmlpserver/HR Manager/W2/W2.xdo?id=Administrator&passwd=Administrator

What about security? Well 'developer beware'!, I wanted some cool Latin phrase that no one would understand but the translators are a little funky in my opinion. Never the less, its a feature, its up to you if you want to use it, or maybe your security folks. So, now you know and I now have somewhere to point folks who ask me about it :)

Comments:

Tim, To make it a little more secure, you can make the link a FORM with method POST, so when they click it, it is submitted, and the URL does not contain the params (including the password), however anyone who right-click's and "View Source" can still see it before they click the URL. Anyway, might be a little more secure for some...

Posted by David T on May 06, 2009 at 12:11 AM MDT #

Hi Tim, does it not make sense, to include for example a java lib, which can pass usrname and passwd encrypted to the url, so that u have a token which is legal for just a couple of minutes? its not as complex as using a sso system, but it would be great benefit. we used that way for all our inhouse applications to realize sso behavior. regards marco

Posted by Marco Weiland on May 08, 2009 at 01:58 AM MDT #

Question: Where can I find the option to change the Document URL in BI Publisher when sent as an email notification?

Posted by Michael on June 09, 2009 at 07:24 AM MDT #

I\'ve never had the opportunity to get links for my website but I\'ve heard great resultsthis website here is a good a acceptable backlinking service to buy backlinks.

Posted by Kristin Chambers on December 10, 2009 at 03:51 AM MST #

it would be great benefit. we used that way for all our inhouse applications to realize sso behavior.

Posted by john on April 04, 2010 at 06:32 PM MDT #

You've got a lot of information to digest here. I am appreciative of the condensed version, between this and another guy’s posts I basically thought I was in LA myself.

Posted by Mac Marlor on April 20, 2010 at 09:18 AM MDT #

Thanks for summarizing some key points. I’m kind of familiar with this space as well and it sounds like this is more valuable than the search-focused ones I generally go after.I stay focused and centered to learn when I can

Posted by Waldo Angus on April 20, 2010 at 11:08 AM MDT #

Chatroulette has taken me by suprise. An idea from the 90's has taken off again. It blows my mind.

Posted by Adult Chatroulette on April 21, 2010 at 11:24 AM MDT #

Chatroulette has taken me by suprise. An idea from the 90's has taken off again. It blows my mind.

Posted by Adult Chatroulette on April 21, 2010 at 11:32 AM MDT #

Chatroulette has taken me by suprise. An idea from the 90's has taken off again. It blows my mind.

Posted by Adult Chatroulette on April 21, 2010 at 11:38 AM MDT #

Chatroulette has taken me by suprise. An idea from the 90's has taken off again. It blows my mind.

Posted by Adult Chatroulette on April 21, 2010 at 11:44 AM MDT #

Great tips to follow. Being professional and showing them there's more to come I think are the most important. You need to give them a great article, that makes them want to come back. And then make sure you don't disappoint.

Posted by Perth Mint on August 14, 2010 at 11:39 PM MDT #

The first half was absolutely spectacular and downright comical; the second half never had a chance to duplicate the magic of the first hour

Posted by Lara on August 20, 2010 at 09:10 AM MDT #

I just got an android phone because it did the job I had in mind. There are way better phones than iphone that don't have so much problems On top of that I think people have had enough of that Apple.

Posted by Willis Mcshan on September 16, 2010 at 09:20 PM MDT #

Every major internet company has a mobile app... do you? You can build one now without code using Droid Generator software. It takes 10 minutes and can drive hundreds of extra users to your blog/site. The average app gets 400 downloads per day. Google: Droid Generator and go mobile!

Posted by Neal Fortin on September 19, 2010 at 06:47 PM MDT #

Post a Comment:
  • HTML Syntax: NOT allowed
About

Follow bipublisher on Twitter Find Us on Facebook BI Publisher Youtube ChannelDiscussion Forum

Join our BI Publisher community to get the most and keep updated with the latest news, How-to, Solutions! Share your feedback and let us hear your voice @bipublisher on Twitter, on our official Facebook page, and Youtube!

Search

Archives
« April 2014
SunMonTueWedThuFriSat
  
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
   
       
Today