SSO authentication for viewing a HTML page running on Apache Tomcat - java

We have a Web Application which have HTML 5 page to see the messages in realtime through websocket connection to our servers.Making websocket connection and showing the graphs work well,HTML5 page needs SSO authentication before it gets displayed.
What has been completed
But for viewing that HTML 5 page we have no file based authentication to read the file with usernames and show a popup to enter username if it is matched then user will be able to see the HTML graphs page.This is not very good approach!!!
What needs to be DONE
Now some type of SSO-Single Sign On authentication(not sure on what type of authentication our organization is currently using) is needed which will do some magical authentication on the back end and after that user would be able to see the HTML graphs page.
Currently the application is running on Apache Tomcat 6 and have couple of javascript files,CSS and one HTML page.Potential solution should be implemented in JAVA,can use any 3rd party API too.
Thanks in advance.

Related

Customize User-Facing Pages for Parse Emails

How can I customize the look and feel of my registration email? In my Parse dashboard, it asks me to upload templates to my "server". I don't have a server for my app. It's fairly basic and depends solely on Parse for my back-end.
Can I just provide a link from, say, a GoDaddy hosting account to the specified HTML template pages provided?
Customize User-Facing Pages
These are the pages your users visit when resetting their password or
verifying their email addresses. You can customize the look and feel of
these pages by uploading a modified copy to your server and telling us
their locations.
Hide Parse.com URLs
By uploading this file to your server and entering its address below,
you can hide parse.com from your users. This page is an iframe for Parse
that lets your domain be the front-end to our back-end.
Yeah, this was really easy.
Just download the provided template files from your Parse.com Dashboard under Settings > Email, then upload them to your server (web host, i.e. GoDaddy).
Where it says /app/password_reset_success.html, etc., replace that entire line with a link to that same file on your server.

Downloading pdf from intranet link to public URL

I am using Struts 1.x framework in my web application .
When the user hits the application URL... ..intranet link is fetched from the db and it should generate the PDF and send this to the user..
Shall I use response.sendRedirect(intranet link);
Will this work in public server(internet)?
Please help me with this
A browser on the web will in general not be able to fetch something from the intranet.
The expensive alternative is to fetch the files from the intranet by your application, and stream them out.
If the intranet uses a user authentication, browser based, maybe Windows Active Directory (via LDAP), maybe SAML, then it gets even harder.
Pragmatic might be to send an e-Mail with the link, allowing the user to get the document in-house only.

get from rally graph

I'm developing a Dynamic web Project in java, and the goal is upon click on button to fetch the "ITERATION BURNDOWN" graph from https://rally1.rallydev.com.
my question is do i have to know the rally api in order to get this content or just to go to the appropriate url and search there the graph?
i login successfully to the rally (used this link for the login: http://www.mkyong.com/java/how-to-automate-login-a-website-java-example/).
after i login successfully i couldn't get the url with the graph. it's just returning the landing page content.
pls help,
Thanks
I assume that you refer to IterationBurndown on Reports>Reports page, which is served by a legacy analytics engine.
To get the appropriate URL you may need to install IterationBurndown report wrapped in an app from AppCatalog on a custom page in Rally. I cannot confirm a java scenario, but the URL of that custom page can be used with javascript, by making an html file with this custom page embedded using iframe, for example:
iframe.src = "https://rally1.rallydev.com/#/12345d/custom/6789";
The steps are:
create a custom page
install IterationBurndown report from the AppCatalog as an app.
At least in the javascript app case, the URL to IterationBurndown on Reports page will not work for this purpose, hence the extra step of using a custom page.
When you say that you get a landing page, I am not sure if you are referring to login page or home page. If it is the former, it means authentication has not been handled. Legacy IterationBurndown report wrapped in an app will not work with newer ApiKey. That's too bad because ApiKey, unlike LoginKey, works with Java as well, unlike the legacy LoginKey which works in the browser (with html/javascript apps) only.

Is Multiple browser window with single time login possible in Java

I have a simple requirement. I have an web application which has a login page, a dashboard and few other pages.
If the user wants to open the application in multiple browser window from a single computer, then I want the user to login only once in first browser window. From next time onwards, whenever user hits the application URL in another different browser window(or tab) in the same Computer, then the application should redirect the user to dashboard without a fresh login. So that user does not have to login each time he opens the application in another browser window.
Is this complete scenario possible in Java/J2EE using JSP and Struts. Here I am using container managed login in Struts for the authentication(login). I need to maintain different HTTP sessions for each window(this is inherent requirement of the application).
Plz guys, waiting for a quick reply as I am stuck with this very urgent requirement from my Client.
Thanks in advance.
Avijit
In the same browser (IE, Firefox, Chrome etc), this is easily achieved with (session) cookies etc.
After login, just set a cookie that subsequent page loads will read from.
Read this question for some good additional related information:
Managing webapp session data/controller flow for multiple tabs
As #Edwin Buck has already mentioned, have a look at OpenID (or a similar single-sign-on framework):
OpenID
You've also got the option of using the client's IP address, but this is hideously insecure.
Look at the single sign-on architecture, or other solutions (like OpenId) which do authentication without end user interaction.

I want to open a webpage from java passing username and password to it

I am working with a small webpage using java and servlets. From my webpage I want to open a third party website without showing its login page. I mean to say authenticating it from Java and entering its home page. Can anyone help me with it?
You have to distinguish between the server (your app) and the client (the browser). Even if you (the server) would authenticate successfully, the client still wouldn't be authenticated, as you have no way to pass the authentication data to the client (cookie restrictions etc.).
So what you could do is read the HTML data of the foreign site on your server and stream it out to your client. But the performance would be miserable, you would have to rewrite every single link on the pages and most of all: you would probably violate copyright laws. Don't do it!
I don't think there is a sane solution for you, unless the author of the other site agrees on a shared authentication mechanism with you.

Categories

Resources