chemistry-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Peter Monks <pmo...@alfresco.com>
Subject Re: getting images directly with alfresco
Date Tue, 19 Jul 2011 18:07:36 GMT
Alfresco's "getContent" CMIS REST API [1] supports a proprietary query string parameter [2]
that will execute the request as the "guest" user, without requiring any other authentication
credentials.  Provided the guest user has read access to the file you're trying to retrieve,
the call will succeed.

Note that this parameter is not part of the CMIS specification - it's an Alfresco-specific
feature that's supported for all Alfresco REST APIs (CMIS or otherwise).

Cheers,
Peter

[1] http://wiki.alfresco.com/wiki/Repository_RESTful_API_Reference#Content_Retrieval_.28getContent.29
[2] http://wiki.alfresco.com/wiki/Web_Scripts#Authenticating   (scroll down to the "Guest
Access" sub-heading)
 


On Jul 19, 2011, at 7:05 am, Florian Müller wrote:

> Hi Christopher,
> 
> There is no way to get the "alf_ticket" through OpenCMIS. You have to use the Alfresco
APIs to request a ticket.
> But you shouldn't do that. It opens a security hole.
> 
> Better build a proxy servlet that handles the download through OpenCMIS.
> 
> 
> - Florian
> 
> 
> On 19/07/2011 14:57, Christopher Cheng wrote:
>> I am using Alfresco as the repository for images of an image gallery
>> implemented in Struts.
>> The problem is that when the html is presented to the client, I want to pass
>> the direct URL of the image like this
>> 
>> <img src="http://www.mycompany.com/alfresco/download/direct?path=/CompanyHome/Web
>> Projects/Images/fantasy.jpg"/>
>> 
>> Of course this doesn't work because the ticket "alf_ticket" is not in the
>> URL and alfresco will take user to the login page.
>> 
>> How could I get the "alf_ticket" with Apache chemistry API?
>> 
> 


Mime
  • Unnamed multipart/alternative (inline, None, 0 bytes)
View raw message