Geographic Information Systems Stack Exchange is a question and answer site for cartographers, geographers and GIS professionals. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

Is there a way to authenticate in geoserver with a external webpage (made with and openlayers)? I have restricted the access data only by certain users, and I don't want to authenticate this way:


for security reasons (the username and password are visible in the webpage code)

Thanks in advance

share|improve this question

The best bet is to have GeoServer behind your web server. This way your requests are received by web server (IIS) first where you authenticate user and then allow features based on roles.

While there are GeoServer Authentication options and GeoPrisma, I think for 90% of apps could use this proxy approach and retain all Geo/Map data securely behind a firewall.


share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.