I have a Geoserver instance on a docker container that sits on an Ubuntu host. At the moment, requests to the Geoserver container are forwarded on through the host's Apache web server. I am making these requests from a javascript web application.

I would like to secure some of my layers on Geoserver.

My question: how can I provide the proper credentials (presumably, username and password) to access these layers from my javascript app without displaying them in plain view in my source code?

  • This is a generic programming question, that is better researched on SO
    – Ian Turton
    Oct 3, 2017 at 15:02
  • I think you're right. I posted their first, but then brought the question over here for visibility. If it's unfit for gis.stackexchange feel free to close it.
    – rumski20
    Oct 3, 2017 at 15:04
  • @rumski20 do you have any update, or any thread that you've posted on other sites? and has the problem been solved?
    – sutan
    Jun 23, 2022 at 13:50
  • @sutan we kind of abandoned the effort to secure access to Geoserver layers via authentication. Sorry to disappoint you here. I would still be interested in the answer. We've done some tightening up via host/IP matching in the Apache configuration.
    – rumski20
    Jun 23, 2022 at 15:56
  • I see, thanks, quite comforting. so basically, no authentication on the GeoServer for the layer is needed; but the layer is accessible if you are from a particular IP address? @rumski20
    – sutan
    Jun 24, 2022 at 9:17