Re: Web Services Authentication

[Bradley Stone <bvstone@xxxxxxxxx>]

If the request is basic authentication you pass it in the headers.  Basic
Authentication looks like a little popup where you enter a userid and
password (exactly like signing into the web admin on the i).

If it's a signon web page you'll be returned a token in the headers (a
cookie) with a value you'll need to pass in your headers on each subsequent
call so it thinks you're still logged in.

You can't mix and match each method.


On Tue, Aug 13, 2013 at 4:05 PM, Allen, Todd
<Todd.Allen@xxxxxxxxxxxxxxxxx>wrote:

> Search for "basic authentication" and you should find what you need on
> HTTP headers.
>
> Todd
>
>
> -----Original Message-----
> From: web400-bounces@xxxxxxxxxxxx [mailto:web400-bounces@xxxxxxxxxxxx] On
> Behalf Of Alvin Strasburger
> Sent: Tuesday, August 13, 2013 4:54 PM
> To: 'Web Enabling the IBM i (AS/400 and iSeries)'
> Subject: Re: [WEB400] Web Services Authentication
>
> We are having trouble finding how to pass the auth info in the header.
>  What does it need to look like?
>
> Alvin
> Alvin Strasburger
> Printgear Sportswear
> Phone    803-744-2310
> Toll Free 800-763-7763
> mailto:alvins@xxxxxxxxxxxxx
> www.printgear.com
>
>
> -----Original Message-----
> From: web400-bounces@xxxxxxxxxxxx [mailto:web400-bounces@xxxxxxxxxxxx] On
> Behalf Of Allen, Todd
> Sent: Tuesday, August 13, 2013 4:29 PM
> To: Web Enabling the IBM i (AS/400 and iSeries)
> Subject: Re: [WEB400] Web Services Authentication
>
> I'd recommend sending the user/password information in the HTTP headers.
>  The web service authentication can read the headers without requiring the
> login screen.
>
> Thanks,
> Todd
>
>
> -----Original Message-----
> From: web400-bounces@xxxxxxxxxxxx [mailto:web400-bounces@xxxxxxxxxxxx] On
> Behalf Of Alvin Strasburger
> Sent: Tuesday, August 13, 2013 3:45 PM
> To: web400@xxxxxxxxxxxx
> Subject: [WEB400] Web Services Authentication
>
> This is our first attempt to open certain web services for select
> customers.
> Is it possible for the i-Series Integrated Web Server to authenticate a
> REST request prior to sending the request to a program?  In testing, we
> have been unable to keep the server from returning a login screen.  Is it
> possible for a web service consumer to send a REST request that includes
> both the Userid/Password info as well as the data request?  If so, what
> setting do we need to add to the server and how should the request be
> formatted?
>
>
>
> Thanks,
>
> Alvin
>
> Alvin Strasburger
>
> Printgear Sportswear
>
> Phone    803-744-2310
>
> Toll Free 800-763-7763
>
>  <mailto:alvins@xxxxxxxxxxxxx> mailto:alvins@xxxxxxxxxxxxx
>
>  <http://www.printgear.com/> www.printgear.com
>
>
>
>
>
> --
> This is the Web Enabling the IBM i (AS/400 and iSeries) (WEB400) mailing
> list To post a message email: WEB400@xxxxxxxxxxxx To subscribe,
> unsubscribe, or change list options,
> visit: http://lists.midrange.com/mailman/listinfo/web400
> or email: WEB400-request@xxxxxxxxxxxx
> Before posting, please take a moment to review the archives at
> http://archive.midrange.com/web400.
>
> For More Than 80 Years—Delivering Solutions That Exceed Expectations.
>
> This communication and any transmitted documents are intended to be
> confidential. If there is a problem with this transmission, please contact
> the sender. If the reader of this message is not the intended recipient, or
> the employee or agent responsible to deliver it to the intended recipient,
> you are hereby notified that any dissemination, distribution or copying of
> this communication is strictly prohibited.
> --
> This is the Web Enabling the IBM i (AS/400 and iSeries) (WEB400) mailing
> list To post a message email: WEB400@xxxxxxxxxxxx To subscribe,
> unsubscribe, or change list options,
> visit: http://lists.midrange.com/mailman/listinfo/web400
> or email: WEB400-request@xxxxxxxxxxxx
> Before posting, please take a moment to review the archives at
> http://archive.midrange.com/web400.
>
>
>
> --
> This is the Web Enabling the IBM i (AS/400 and iSeries) (WEB400) mailing
> list
> To post a message email: WEB400@xxxxxxxxxxxx
> To subscribe, unsubscribe, or change list options,
> visit: http://lists.midrange.com/mailman/listinfo/web400
> or email: WEB400-request@xxxxxxxxxxxx
> Before posting, please take a moment to review the archives
> at http://archive.midrange.com/web400.
>
> --
> This is the Web Enabling the IBM i (AS/400 and iSeries) (WEB400) mailing
> list
> To post a message email: WEB400@xxxxxxxxxxxx
> To subscribe, unsubscribe, or change list options,
> visit: http://lists.midrange.com/mailman/listinfo/web400
> or email: WEB400-request@xxxxxxxxxxxx
> Before posting, please take a moment to review the archives
> at http://archive.midrange.com/web400.