WEB API

venkateshs329 over 7 years ago

# Integrations WEB API
I am caling WEB API from Jquery using credentials[Basic User],When i open .html file in IE browser it's return some json data,
In the same browser i have already logined with my credentials[System Administrator] in tempo page , if i reload tempo page it automatically goes to the basic user profile
in tempo but username shows my name only,but in backgroud is showing all information of Basic User, Is there any security issues or any other problem ?

Sample Jquery code snnipet:
<!DOCTYPE html>
<html>
<head>
<script src="ajax.googleapis.com/.../script>
<script>
var data;
$(document).ready(function(){
$("#btn1").click(function(){
$.ajax({
                    url:"url",
                    type:'GET',
                    dataType:"json",
           headers: {
"Authorization": "Basic " + btoa("username" + ":" + "password")
},
success: function(result){...

Discussion posts and replies are publicly visible

0 venkateshs329 over 7 years ago

...
           alert("success");
                     data = JSON.stringify(result);
                    alert("result : "+ String(data));
},
          error: function(result){
                    alert("Error..!!")}});
});
});
</script>
</head>
<body>

<div id="div1"><h2>Test Web Api Call </h2>
<h1 id="h1"></h1>
<h1 id="h2"></h1>
</div>
<button id="btn1">GetResponse</button>
</body>
</html>
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel
0 Stefan Helzle
A Score Level 3
over 7 years ago

This is default browser behaviour. When you login to Appian, a cookie is stored in the browser which sends it back to Appian for each request. Your javascript is running inside the browser. I can not see any problem there.
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel
0 venkateshs329 over 7 years ago

@Stefan: I already logged with my credentials[System Administrator] in my environment and from jquery i passed some other basic user credentials ,
that time in browser background my credentials logout automatically and in tempo basic user profile came.that time am unable to access designer or design because basic user , it showing error
page as , cannnot open page please contact system administrator.
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel
0 venkateshs329 over 7 years ago

Stefan Did you tried with basic user credentials from jquery for caling web api , just reload tempo page,
In my case before caling web api in my tempo i have 10 tasks in tasks tab , after caling web api in same browser in tempo
am able to see 280 tasks because the basic user has 100 tasks.
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel
0 venkateshs329 over 7 years ago

Basic user has 280 tasks
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel
0 Stefan Helzle
A Score Level 3
over 7 years ago

I never toyed around with jQuery to access Appian from local browser. But as I said, your browser will store the cookie sent from Appian and reuse it for subsequent calls. I think this pretty matches what you see there.
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel