Bypass Session Signature for single specific URI

ImproSnake · 2017-09-06 04:10:38

Hello Folks,

ist there a possibility to bypass the Authentication for a specific single URI, like it is with the standard URI '/auth'. For that one you dont need a session_signature. I want to do the same for a function which just check the SessionId. And i dont want to run in a 403 Auth failed error if the session doesnt exists any longer (therefore wrong SesionSign).

Any Idea here ?

esmondb · 2017-09-06 05:08:47

Have a look at:
ServiceMethodByPassAuthentication

ImproSnake · 2017-09-06 05:24:24

Thank you, i just overread that in the docs. Really much appreciate your help!

ImproSnake · 2017-09-06 08:01:29

Sorry for bother you again, i can't figure out how to use the Method. On the Server Side i just call the Method with the Parameter "checkSession" and i have a Interfaced ISession with a method Session.checkSession.

Maybe it is obvious but i just dont get how to call the Method properly. I can't find a examle as well, any further help is well appreciated

ab · 2017-09-06 08:14:47

This ServiceMethodByPassAuthentication method is for method-based services. As documented, and as its name states.

To tune interface-based service method authentication, when you register the service, you can set TServiceFactoryServer.ByPassAuthentication property to disable authentication for a given interface-based service.

But in your case, if you need a single URI, a method-based service is preferred.

ImproSnake · 2017-09-06 08:55:26

Thank you ab. That was the right direction to point me. I solved my specific Issue now. Thank you

mORMot Open Source

#1 2017-09-06 04:10:38

Bypass Session Signature for single specific URI

#2 2017-09-06 05:08:47

Re: Bypass Session Signature for single specific URI

#3 2017-09-06 05:24:24

Re: Bypass Session Signature for single specific URI

#4 2017-09-06 08:01:29

Re: Bypass Session Signature for single specific URI

#5 2017-09-06 08:14:47

Re: Bypass Session Signature for single specific URI

#6 2017-09-06 08:55:26

Re: Bypass Session Signature for single specific URI

Board footer