Geographic Information Systems Stack Exchange is a question and answer site for cartographers, geographers and GIS professionals. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I can see that this question is asked before but not answered properly. I'm trying to authenticate with geoserver before trying to send any wfs requests. I need to use the geoserver users.

I already tried this and the login was succesfull but i can't find a way to check if the login is succesfull or not cause the cookie that geoserver returns is http-only.

Any ideas?

share|improve this question

We decided to use our own proxy to achieve authentication. Details on the first version of the proxy can be seen here

Essentially we use a standard login using Ajax against our client database over https. We return a Guid, which is stored in a table on the server, to the JavaScript and modified the proxy code given above to validate back against the database before passing the request to GeoServer. On Session Timeout, or user logout, the guid is removed from the Server table.

Any requests with an invalid guid are just dropped. I cannot give you the code because it is integral in our security system, but you should be able to get the general idea.

You can use this feature to log different events, provide a public request for x number of events and so on.



share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.