worklight-security

IBM Worklight: Self-signed CA implementation in Testing environment with Load Balancer

99封情书 提交于 2019-12-23 05:15:22
问题 I have the following implementation in testing environment, Front-end Server [IBM HTTP Server + IBM Websphere plugin], WLServer1 [IBM Worklight 6.2 + IBM DB2 10.1+ Liberty Farm 8.5.5.1] and WLServer2 [IBM Worklight 6.2 + IBM DB2 10.1+ Liberty Farm 8.5.5.1]. plugin-cfg.xml has been generated from each Worklight server and merged. The request[http] from multiple devices has been directed to worklight server's alternatively, once the merged plugin-cfg.xml has been deployed in Front-end server's

Worklight Online + Offline Authentication

拈花ヽ惹草 提交于 2019-12-21 06:31:14
问题 I'm trying to achieve the following through Worklight. My app has two sets of features. One set of features can be accessed only when the app is connected to the server and the user is authenticated. Another set of features can be accessed offline but they require data from an encrypted JSONStore. I have a JSONStore on the client device which is initialized using a password. Therefore, the data in the store will be encrypted. Also, this JSONStore is synced to a database on the server through

Worklight Online + Offline Authentication

一笑奈何 提交于 2019-12-21 06:29:13
问题 I'm trying to achieve the following through Worklight. My app has two sets of features. One set of features can be accessed only when the app is connected to the server and the user is authenticated. Another set of features can be accessed offline but they require data from an encrypted JSONStore. I have a JSONStore on the client device which is initialized using a password. Therefore, the data in the store will be encrypted. Also, this JSONStore is synced to a database on the server through

IBM Worklight : WL.Client.getUserName Fails to retrieve userIdentity immediately after authentication

▼魔方 西西 提交于 2019-12-18 07:23:19
问题 I have done adapter based authentication and there is no problem in authentication and it works fine. I have faced some issues in getting the active users useridentity.The code may explain you a bit more adapterAuthRealmChallengeHandler.handleChallenge = function(response){ var authRequired = response.responseJSON.authRequired; if (authRequired == true){ if (response.responseJSON.errorMessage) alert(response.responseJSON.errorMessage); } else if (authRequired == false){

Worklight v6 iwap

江枫思渺然 提交于 2019-12-14 03:17:55
问题 I set up Worklight V6 Server and IWAP. I found my worklight app console has analytics tab and there is IWAP console. there is dashboad view, search view, search log view, geo analytics view. then I put WL.Logger.error and WL.Analytics.log code in my app and issued these logs but I cannot find any data on my IWAP console. and there is following NumberFormatException in my IWAP logs. can I fix this? [2013-06-24 18:02:35,998][DEBUG][action.search.type ] [Rattler] [worklight][7], node

using Multiple LDAPproviderURLs in AuthenticationConfig.xml

只愿长相守 提交于 2019-12-13 06:24:30
问题 I am using LDAP Login Module in Worklight to authenticate users. I have provided the IP Address of one of my Domain Controllers in ldapProviderUrl, and everything is working perfectly fine. Now, I want to add the second Domain Controller as a backup for authentication in case the Primary DC is down. Any one has any idea if I can add another ldapProviderUrl in authenticationConfig.xml ? I have already tried using the Generic Domain Address, but that is not working at all. I am using Worklight

unknown challenge arrived, cannot process realm wl_deviceNoProvisioningRealm challenge

爱⌒轻易说出口 提交于 2019-12-13 04:59:40
问题 I'm facing the following issue after I deploy my Worklight (v6.2.0.01) application in the Enterprise Worklight server. The issue manifests only for the mobile web app environment. Worth noting that the same application in the same environment, runs fine in the local development server (also based on Worklight 6.2.0.01). Console Error: [Error] unknown challenge arrived, cannot process realm wl_deviceNoProvisioningRealm challenge. __log (worklight.js, line 4879) (anonymous function) (worklight

Can't retrieve user roles

江枫思渺然 提交于 2019-12-12 18:24:37
问题 I am trying to return a list of roles back to a mobile client device from the WL server In the createIdentity method of my LoginModule I added the following code HashMap<String, Object> customAttributes = new HashMap<String, Object>(); customAttributes.put("AuthenticationDate", new Date()); Set<String> groups = new HashSet<String>(); groups.add("Managers"); groups.add("Users"); UserIdentity identity = new UserIdentity(loginModule, USERNAME, "Fred Flintstone", groups, customAttributes,

How to implement password protect security in JsonStore Worklight 6.2?

孤街浪徒 提交于 2019-12-11 23:19:18
问题 I want to implement the app in worklight using JsonStore protection i want to store password based on logined user and add those password to options in WL.JSONStore.init(collections,options) . The rest of the details in data object data={} ; and how do i extract the password saved WL.JSONStore.init(collections,options) options object for making api calls for rest of the functions? 回答1: My take on the question: Storing the password in the device is indeed not a good practice to follow. There

IBM Worklight 6.0 - Adapter with basic auth doesn't update auth header if client logs out/in

喜你入骨 提交于 2019-12-11 00:08:34
问题 I have a Worklight v6.0 application using adapter-based authentication. The adapter is an HTTP adapter that calls a backend REST service using Basic Auth. There is no session or cookies between the adapter and the backend service. In my Adapter descriptor, I have set the cookiePolicy to IGNORE_COOKIES. Each request from the adapter to the backend is authenticated with the basic auth header on that request. Each of the adapter's procedures has connectAs set to: endUser. <?xml version="1.0"