nav[aria-label="Primary Navigation"] { padding: 0; & ul { list-style: none; width: 100%; display: flex; flex-direction: row; justify-content: start; align-items: start; gap: 30px; padding: 0; & li { margin: 0; } & ul li { list-style: none; } } }

How to login without password into confluence 6.8 ?

hamed_hatami

Hi there,

I want to login into confluence 6.8 from my web application without password

actually, I need to login into confluence by username only

I can get the user token from rest api but when i put the user token in cookie and return back to confluence , nothing happened

I have integrated confluence with Crowd and I have activated the SSO but I don't know how can I use crown in my web application ??

Is there any easy solution to login ???

My email address : hamedhatami2012@gmail.com

Regards,

Hamed Hatami

Accepted answers

All comments

kennyngkk

If you would like to enable the web application to talk to Crowd. You will need to create it as a Crowd Client. You can have a look at the knowledge base below on how you may be able to do it.

https://confluence.atlassian.com/crowd/integrating-crowd-with-a-custom-application-192511.html

Once you have a talking communication between Crowd and web application.

Ensure that you insert the web application URL to Confluence whitelist by following the guide below.

https://confluence.atlassian.com/doc/configuring-the-whitelist-381255821.html

hamed_hatami

Hi,

Thanks for your reply

Actually, I have integrated Crowd's (users and groups) with Confluence and Jira but one of my important requirements was to use crowd as SSO center and my web application should redirect to confluence/jira pages without login ???

Nic Brough -Adaptavist-

As Kenny said already, you need to make your application be a client for Crowd.

The way SSO works is that when you log into ONE application, that application

first looks for a token that identifies you and says you have access
second, if you do not provide that token, knows how to create a new one based on your authentication details (which are usually username/password, but can be other things), and then log you in.

Any other application in the set will do the same, but they all need to be set up as SSO clients that understand those tokens and use them to authenticate people with Crowd.

So. Your web-application needs to be a client for Crowd so it can create those tokens for logging into other systems (without passwords)

hamed_hatami

As a matter of fact, my web application is a client of crowd and I can get token from crowd but I need an exact example of parameter should set into confluence url to authenticated correctly, and directly goes to confluence in my web application response

hamed_hatami

This is a snipet of code to getting token from crowd and then I should goto confluence or jira from inside of my web application that is based on Java EE 7 :

public static String getToken(String propertyName, String username, String password) throws Exception {
String token = "";
Properties crowd_props = new Properties();
crowd_props.load(CrowdClientUtil.class.getClassLoader().getResourceAsStream("/" + propertyName.trim()));
ClientProperties clientProperties = ClientPropertiesImpl.newInstanceFromProperties(crowd_props);
CrowdClient crowdClient = new com.atlassian.crowd.integration.rest.service.factory.RestCrowdClientFactory().newInstance(clientProperties);
/* CrowdHttpAuthenticator crowdHttpAuthenticator = new CrowdHttpAuthenticatorImpl(crowdClient,
clientProperties,
CrowdHttpTokenHelperImpl.getInstance(
CrowdHttpValidationFactorExtractorImpl.getInstance()));*/
UserAuthenticationContext userAuthenticationContext = new UserAuthenticationContext();
userAuthenticationContext.setName(username);
userAuthenticationContext.setCredential(new PasswordCredential(password, false));
ValidationFactor[] factors = new ValidationFactor[]{
new ValidationFactor("remote_address", "127.0.0.1"),
new ValidationFactor("X-Forwarded-For", clientProperties.getApplicationAuthenticationURL())
};

userAuthenticationContext.setValidationFactors(factors);
userAuthenticationContext.setApplication(clientProperties.getApplicationName());

token = crowdClient.authenticateSSOUserWithoutValidatingPassword(userAuthenticationContext);

return token;
}

hamed_hatami

Please send me a snipet of java code that can connect and then redirect to confluence or jira with using crowd sso ability from third-party application

hamed_hatami

I'm looking forward to hearing from you

hamed_hatami

String token = CrowdClientUtil.getToken("confluence.properties", username, "");

FacesContext facesContext = FacesContext.getCurrentInstance();
ExternalContext externalContext = facesContext.getExternalContext();

Date expdate = new Date();
expdate.setTime(expdate.getTime() + (3600 * 1000));
DateFormat df = new SimpleDateFormat("EEE, dd-MMM-yyyy HH:mm:ss zzz");
df.setTimeZone(TimeZone.getTimeZone("GMT"));

//crowd.token_key

externalContext.setResponseHeader("Set-Cookie", "seraph.confluence=" + token.trim() + "; Expires=" + df.format(expdate) + "; Max-Age=2592000; Domain=127.0.0.1; Path=/; Secure; HttpOnly");

externalContext.redirect(Configuration.getProperty("base_url") + "/" + Configuration.getProperty("login_page").trim());

externalContext.invalidateSession();
facesContext.responseComplete();

Welcome!

It looks like you're new here. Sign in or register to get started.

Quick Links

Find more posts tagged with

confluence

developer