Previous Topic
Using the Authentication Properties in URL
Logi Report Server requires that you be authenticated before you can access any web pages. This topic describes how you can use the authentication properties in URL.
When using URL to work on Logi Report Server, if you have not previously been authenticated, you can include the authentication properties in the URL to pass in login credentials. This is a proprietary login protocol Server develops to make it easy to identify a user by passing along the login request in the URL along with the operation request.
You can use the following authentication properties to pass in the login credentials.
- jrs.authorization
Tag of the HTTP query field jrs.authorization.
Description: Loads the requested page with the specified credential information. You should not this method outside of a firewall, although it looks like it is encrypted it is not secure.
Format of the value of the HTTP query field: Base64-encoded (userID:password). For more information, see http://en.wikipedia.org/wiki/Base64.
In the following examples, the user ID and password are both set as admin, so the value of the HTTP query field is Base64-encoded("admin:admin")="YWRtaW46YWRtaW4=".http://localhost:8888/jrserver?jrs.cmd=jrs.get_subnodes&jrs.authorization=YWRtaW46YWRtaW4%3D.http://localhost:8888/jreport/dashboard/app/entry/run.jsp?jrd_resext={"active":0,"reslst":[{"name":"/SampleReports/Dashboard - Coffee Sales.dsh","ver":-1}]}&jrs.authorization=YWRtaW46YWRtaW4%3D
- jrs.auth_uid and jrs.auth_pwd
Tags of HTTP query field: jrs.auth_uid and jrs.auth_pwd.
Description: Loads the requested page with the specified credential information.
Format of the value of the HTTP query field: jrs.auth_uid=USER_ID, jrs.auth_pwd=PASSWORD.
Examples:- This URL requests the JSP page viewVersion.jsp with credentials passed in to log in user "scott" with password "tiger":
http://localhost:8888/jinfonet/viewVersion.jsp?jrs.cmd=jrs.view_ver_def&jrs.rst_version=1&jrs.ver_suff=.pdf&jrs.report=/Payroll Report.cls&jrs.auth_uid=scott&jrs.auth_pwd=tiger - This URL runs the dashboard with credentials passed in to log in user "scott" with password "tiger":
http://localhost:8888/jreport/dashboard/app/entry/run.jsp?jrd_resext={"active":0,"reslst":[{"name":"/SampleReports/Dashboard - Coffee Sales.dsh","ver":-1}]}&jrs.auth_uid=scott&jrs.auth_pwd=tiger
- This URL requests the JSP page viewVersion.jsp with credentials passed in to log in user "scott" with password "tiger":
JRServlet does not perform authentication check when an HTTP request has no jrs.cmd in the HTTP query in the root path of JRServlet, and also does not accept the jrs.authorization and jrs.auth_uid & jrs.auth_pwd for the request.