I can see that this question is asked before but not answered properly. I'm trying to authenticate with geoserver before trying to send any wfs requests. I need to use the geoserver users.

I already tried this and the login was succesfull but i can't find a way to check if the login is succesfull or not cause the cookie that geoserver returns is http-only.

Any ideas?

1 Answer 1


We decided to use our own proxy to achieve authentication. Details on the first version of the proxy can be seen here

Essentially we use a standard login using Ajax against our client database over https. We return a Guid, which is stored in a table on the server, to the JavaScript and modified the proxy code given above to validate back against the database before passing the request to GeoServer. On Session Timeout, or user logout, the guid is removed from the Server table.

Any requests with an invalid guid are just dropped. I cannot give you the code because it is integral in our security system, but you should be able to get the general idea.

You can use this feature to log different events, provide a public request for x number of events and so on.



Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Not the answer you're looking for? Browse other questions tagged or ask your own question.