These forums are read-only and considered to be an archive. Please use the new Community for future interaction and posts.

Authentication - Step by step instructions

Please let me know how to implement authentication to FileVista without prompting the user. Currently our website authenticates the user using our own database. I already offer to the clients the possibility of using Unlimited FTP. We bypass their login page using:

<%@LANGUAGE="VBSCRIPT" CODEPAGE="1252"%>
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1" />
<title>ourdomain</title>
</head>
<body>
<form name="formulario" action="http://www.ourdomain.com.br/<%=Request.QueryString("idioma")%>/ftp/indexbi.asp" method="post">
<input type="hidden" name="username" value="<%=Request.querystring("user")%>"/>
<input type="hidden" name="password" value="<%=Request.querystring("senha")%>" />
<input type="hidden" name="language" value="<%=Request.QueryString("idioma")%>"/>
<script>document.formulario.submit();</script>
</form>
</body>
</html>


Is there something similar I can do with FileVista? I do not want to generate cookies.

Thanks in advance
Mauro Bertuol 12/26/2008 9:27 AM
Why the support does not work?

It seems there is this great product but there are no help files and neither support. WHY?
Mauro 1/6/2009 8:17 AM
Hi Mauro,
Sorry for the late response, we were busy redesigning our web site.

As of version 3.5, only way for pass-through login is using cookies because of security reasons. Passing user names and passwords in clear text like querystrings is not secure. Actually using cookies is very easy, let me know and I will assist you.
Cem Alacayir 1/6/2009 3:38 PM
Hi Cem,

Please let me know all the code that should be in the cookie, using the information I can retrieve from the user session, as posted above. Would it be possible to also define the language to be used in FileVista with the cookie?

What if the user does not allow cookies? What type of error message would come up?
Mauro 1/7/2009 3:51 AM
Hello,

I have used the following code to generate the cookie (in VB):

<%  Dim userName As String
    Dim applicationKey As String
    applicationKey = "48A5B4EF36615265C7997BA99F1743A17E1196713E613E14457B7658791FBE8C"
    userName = "admin"
    
    Response.Cookies("FileVista.ExternalUser")("name") = userName
    Response.Cookies("FileVista.ExternalUser")("hash") = GleamTech.Utility.CryptoManager.Hash(userName + applicationKey)
    Response.Cookies("FileVista.ExternalUser").Path = "/"
    Response.Cookies("FileVista.ExternalUser").Expires = DateTime.Now.AddDays(1)
    %>

When I clink on the url to FileVista, I get the following error:

"Login failed for External User "admin" !
Provided security hash can not be validated."

What can I do?

Thank you
Mauro 1/8/2009 8:15 AM
Hi Mauro,
You are on the right track but you need to use your own applicationKey which is found in FileVista/App_Data/FileVista.config 

This key is specific to your FileVista installation and it differs for each installation, the above key is just an example key thus the error says that security hash can not be validated.
Cem Alacayir 1/8/2009 8:58 AM
It worked! Thank you.

Question: is there a way I can configure the language FileVista will use on the cookie?
Mauro 1/9/2009 4:25 AM
No, you can not control the language with the cookie but you can already change the language for each user seperately on the "User Settings" dialog in FileVista. So you can set the languages for your users beforehand and FileVista will be displayed with their selected language when they are redirected.
Cem Alacayir 1/9/2009 4:52 PM