nav[aria-label="Primary Navigation"] { padding: 0; & ul { list-style: none; width: 100%; display: flex; flex-direction: row; justify-content: start; align-items: start; gap: 30px; padding: 0; & li { margin: 0; } & ul li { list-style: none; } } }

Teamsite logout

Kay

Hi All,

We are implementing custom authentication in addition to teamsite login and logout feature. My question is when some one logs out from teamsite what exactly does the teamsite logout servlet do. I need to know the functionality of logout servlet as I will be using my own custom logout servlet and want to make sure that I dont miss anything that teamsite logout servlet does.

I really appreciate your help on this.

Find more posts tagged with

Comments

Bowker

Kay,

I'm also interested in this topic. I once posted here and didn't get a response that worked either. I was interested in two different things - how to tell if someone's TeamSite authentication cookie is valid (and not timed out!) and also how to log someone out without accessing the TeamSite GUI.

If you get a response to this, would you please forward it to me?

Dan Bowker
Northern Trust
ddb@ntrs.com

Migrateduser

The authentication information is stored on the client side, in the browser's IWAUTH cookie. To cause a client to be logged out, simply invalidate the IWAUTH cookie by deleting it or clearing its value.

The best way to test the validity of the IWAUTH cookie is to use OpenAPI.

import com.interwoven.api.access.*;

IWAccessService accSvc = (IWAccessService)IWServiceLocator.locate("IWAccessService");

String cookieValue = getCookie("IWAUTH");
IWAccessorAuthentication a = IWAccessorAuthentication.createFromString(accSvc, cookieValue);
return a.isValid();

-- Derek Poon, Interwoven Staff Engineer

fiquebem

We're developing a JSP/Java application to be invoked from the TS GUI as a custom-menu item. We are still on TS 5.0.2. If we had FormAPI, we might not have taken that (custom application) route.

We are thinking of redirecting from a CGI (since the custom-menu item must point to either a CGI or an HTML file) to a JSP on a separate application server running on the same machine. I'll pass the TS username, the workarea, etc., to the JSP (or perhaps just the "sessionID").

I was thinking of using the TeamSite command-line tools to, for example, create and invoke a workflow job from the said application (and bypass the OpenAPI can of worms). However, someone here pointed out that a hacker could forego authentication altogether by addressing the JSP directly.

So I started looking at the IWAUTH cookie. In my test JSP, I'm invoking request.getCookies() but, alas, it only returns one cookie, namely, jsessionid.

I should be able to get the IWAUTH cookie -- what am I doing wrong; how does TeamSite get it when I type-in a URL? Via OpenAPI issuing HTTP responses/requests behind the scenes?

I never used OpenAPI before; I tried the sample IWAccessTest0.java today. It worked fine. Then I added the code below to it (to check whether IWAUTH was valid). I got:

IWAccessService accSvc = (IWAccessService)IWServiceLocator.locate("IWAccessService");
^
IWAccessTest0.java:121: cannot resolve symbol

Looks like "IWServiceLocator" is not in OpenAPI 1.0.

I also got an error for:

String cookieValue = getCookie("iwauth");

Where the heck is the getCookie() method (pardon my naivete)? It doesn't seem to be in HttpServletRequest.

Anyway, with only OpenAPI 1.0, will I be able to get the IWAUTH cookie and check for it's validity (from a JSP)? Recall that the JSP will be running on a different servlet engine. What ungodly classpaths/import strings will I need? Or can I just attach "rmi://host/" in front of each and every token the compiler complains about? Incidentally, don't I need to specify a port after the host?

What other options do I have to authenticate from that application (short of prompting the user for his password)? Write/read a temporary "credentials" file on the TS box, as someone mentioned, and then expired it? Sigh ...

Unfortunately, we're pressed for time too. We have to complete our application in a couple of weeks; upgrading TS is months away.

Thanks for any feedback (including commiseration),

S.