Secure JSAPI authentication

amozharovskyi

<p>Hi,</p>
<p> </p>
<p>Looking on Aviatio Example, can see that in <a data-ipb='nomediaparse' href='https://github.com/ActuateBIRT/AviatioExample/blob/aviatioMaster/js/main.js'>https://github.com/ActuateBIRT/AviatioExample/blob/aviatioMaster/js/main.js</a> file iHub's username and password are hardcoded and then used as arguments of <span style="color:rgb(51,51,51);font-family:Consolas, 'Liberation Mono', Menlo, Courier, monospace;font-size:12px;">actuate.initialize() </span>function in <a data-ipb='nomediaparse' href='https://github.com/ActuateBIRT/AviatioExample/blob/aviatioMaster/js/controller.js'>https://github.com/ActuateBIRT/AviatioExample/blob/aviatioMaster/js/controller.js</a> file.</p&gt;
<p> </p>
<p>Is any other more secure way to perform initialization (without hardcoding username and password)?</p>
<p> </p>
<p>Thanks,</p>
<p>Andrii</p>

JFreeman

<p>You can implement an iPortal Security Extension and even integrate it with an SSO to handle the authentication instead of having a hard coded username/password.</p>
<p> </p>
<p>Take a look at the documentation on integrating applications into iHub for a starting point: <a data-ipb='nomediaparse' href='http://developer.actuate.com/be/documentation/ManualsIHUB31/ihub-integration-guide.pdf'>http://developer.actuate.com/be/documentation/ManualsIHUB31/ihub-integration-guide.pdf</a></p&gt;