REST Authentication for Nodes

Hi!

I am trying to build a basic proof to call the REST web services and use them to show children of a node. First problem I am having is authentication. Seems like the way we are setup, this goes through a linux box:

this.GetAuthToken = function (user, pass) {
            return $http({
                method: 'POST',
    url: 'https://[server]/otdsws/v1/authentication/credentials',
    data: { user_name: user, password: pass },
    headers: { "Content-Type" : "application/json" }
            }).catch(function (err) {
                alert("Error: " + err.data);
            });
        };

And that works as long as the user_name is in [domain]\[account] format.

However, now I want to get the children of nodes. The otdsws does not seem to have calls to access the data, so I went with the content server calls, which are on an IIS box.

this.GetNodeChildren = function (nodeId) {
            return $http({
                method: 'GET',
                url: '[server]/otcs/llisapi.dll/api/v1/nodes/' + nodeId + '/nodes',
    headers: { "Content-Type" : "application/json" }
            }).catch(function (err) {
                 alert("Error: " + err.data);
            });
        };

However, I do not see a place to pass the auth token from the prevous call and continually get a popup for username/password which doesn't accept my username/password. I've also tried theapi/v1/auth on that same server, but continually get a IIS 500 error despite passing username, password, and even domain.

And ideas on how to propoerly authenticate so as to be able to call the nodes api?

Thanks!
Frank

Find more posts tagged with

Comments

Ferdinand Prantl

You should exchange the OTDS ticket for OTCS ticket after the first call to CS REST API.
- OTDS ticket can be one-time usable only.
- OTDS ticket is slower to process on CS.
You may want to refresh the OTCS ticket, if your script communicates for a long time and you need to avoid the ticket expiration.
CS REST API does not accept the "application/json" content type. You need to use "application/x-www-form-urlencoded" or "multipart/form-data". But it is not needed for getting node children.

For example:

this.GetAuthToken('me', 'secret')    .GetNodeChildren(2000)    .then(function (children) {      console.log(children.length);    })    .catch(function (request) {      console.error(request.statusCode, request.statusText);    });this.GetAuthToken = function (user, pass) {  return $http({           method: 'POST',           url: 'https://[server]/otdsws/v1/authentication/credentials',           data: { user_name: user, password: pass },           headers: { 'Content-Type' : 'application/json' }         })         .then(function (response) {           this._otdsTicket = response.ticket;         }.bind(this));};this.GetNodeChildren = function (nodeId) {  return $http({           method: 'GET',           url: '[server]/otcs/llisapi.dll/api/v1/nodes/' + nodeId + '/nodes',           headers: this._GetAuthenticationHeader()         })         .then(function (response, status, request) {           this._UpdateAuthenticationHeader(request);           return response.data;         }.bind(this));};this._GetAuthenticationHeader = function () {  return this._otcsTicket ?         {OTCSTicket: this._otcsTicket} :         {OTDSTicket: this._otdsTicket};}this._UpdateAuthenticationHeader = function (request) {  this._otcsTicket = request.getResponseHeader('otcsticket');}

You can have a look at https://knowledge.opentext.com/go/67826439 to see how to authenticate by "POST .../api/v1/auth".

Riten

Hi Frank,

You will need to pass OTCSToken as part of the headers for subsequent requests after authentication. The successful authentication will have a token as part of its response.

Thanks,

Riten

From: eLink Entry: Content Web Services Forum [mailto:otdncontentwebservices971forum@elinkkc.opentext.com]
Sent: Tuesday, April 18, 2017 11:23 AM
To: eLink Recipient <devnull@elinkkc.opentext.com>
Subject: REST Authentication for Nodes

REST Authentication for Nodes

Posted by Beaty, Frank On 04/18/2017 11:15 AM

Hi!

Thanks!
Frank

[To post a comment, use the normal reply function]
Forum:	Content Web Services Forum
Content Server:	Knowledge Center CS16

Beaty_Frank

What I was able to do was authenticate as follows:

function GetTicket(user, pass) {
            return $http({
                method: 'POST',
    url: $config.otdsUrl + '/otdsws/v1/authentication/credentials',
    data: { user_name: user, password: pass },
    headers: { "Content-Type" : "application/json" }
            }).catch(function (err) {
                alert("Error: " + err.data);
            });
        };

And then use it to call in for child nodes:
function LoadChildNodes(nodeId) {
   return $http({
                method: 'GET',
                url: $config.csUrl + '/otcs/llisapi.dll/api/v2/nodes/' + nodeId + '/nodes',
    headers: {
     OTDSTicket: $auth.Ticket
    }
            }).catch(function (err) {
                 alert("Error: " + err.data);
            });
  }

with $auth.ticket being the ticket property of the returned auth result. Calling into nodes, I do not get a OTCS ticket, though the OTDS ticket is able to be used multiple times.

Thanks!