Geographic Information Systems Stack Exchange is a question and answer site for cartographers, geographers and GIS professionals. It only takes a minute to sign up.
Sign up to join this community
I can see that this question is asked before but not answered properly. I'm trying to authenticate with geoserver before trying to send any wfs requests. I need to use the geoserver users.
I already tried this and the login was succesfull but i can't find a way to check if the login is succesfull or not cause the cookie that geoserver returns is http-only.
Any ideas?
We decided to use our own proxy to achieve authentication. Details on the first version of the proxy can be seen here
Essentially we use a standard login using Ajax against our client database over https. We return a Guid, which is stored in a table on the server, to the JavaScript and modified the proxy code given above to validate back against the database before passing the request to GeoServer. On Session Timeout, or user logout, the guid is removed from the Server table.
Any requests with an invalid guid are just dropped. I cannot give you the code because it is integral in our security system, but you should be able to get the general idea.
You can use this feature to log different events, provide a public request for x number of events and so on.
Cheers
Mark
