Ibm mobilefirst LDAP示例\u需要帮助吗
我正在进行LDAP身份验证。我从IBM WorkLink基金会启动网站下载了这个例子。 在所有的配置等之后，我看到LDAP不工作 根据示例，getSecretData方法应该在登录表单的成功身份验证之后执行 但即使我给出了错误的凭证，它也会让我使用getSecretData方法 请帮忙 在那里找到代码 HTML页面：Ibm mobilefirst LDAP示例\u需要帮助吗,ibm-mobilefirst,worklight-security,Ibm Mobilefirst,Worklight Security,我正在进行LDAP身份验证。我从IBM WorkLink基金会启动网站下载了这个例子。 在所有的配置等之后，我看到LDAP不工作 根据示例，getSecretData方法应该在登录表单的成功身份验证之后执行 但即使我给出了错误的凭证，它也会让我使用getSecretData方法 请帮忙 在那里找到代码 HTML页面： <div id="AppDiv"> <div class="header"> <h1>LDAPA
<div id="AppDiv">
<div class="header">
<h1>LDAPApp</h1>
</div>
<div class="wrapper">
<input type="button" value="Call protected adapter proc" onclick="getSecretData()" />
<input type="button" value="Logout" onclick="WL.Client.logout('LDAPRealm',{onSuccess: WL.Client.reloadApp})" />
</div>
<div id="resultDiv"></div>
</div>
<div id="AuthDiv" style="display:none">
<div id="loginForm">
Username:<br/>
<input type="text" id="usernameInputField" value=""/><br />
Password:<br/>
<input type="password" id="passwordInputField" value=""/><br/>
<input type="button" id="loginButton" value="Login" />
<input type="button" id="cancelButton" value="Cancel" />
</div>
</div>
<script src="js/initOptions.js"></script>
<script src="js/LDAPApp.js"></script>
<script src="js/messages.js"></script>
<script src="js/LDAPRealmChallengeHandler.js"></script>
</body>
var LDAPRealmChallengeHandler = WL.Client.createChallengeHandler("LDAPRealm");
LDAPRealmChallengeHandler.isCustomResponse = function(response) {
if (!response || !response.responseText) {
return false;
}
var idx = response.responseText.indexOf("j_security_check");
if (idx >= 0){
return true;
}
return false;
};
LDAPRealmChallengeHandler.handleChallenge = function(response){
$('#AppDiv').hide();
$('#AuthDiv').show();
$('#passwordInputField').val('');
};
$('#loginButton').bind('click', function () {
var reqURL = '/j_security_check';
var options = {};
options.parameters = {
j_username : $('#usernameInputField').val(),
j_password : $('#passwordInputField').val()
};
options.headers = {};
LDAPRealmChallengeHandler.submitLoginForm(reqURL, options, LDAPRealmChallengeHandler.submitLoginFormCallback);
});
$('#cancelButton').bind('click', function () {
$('#AppDiv').show();
$('#AuthDiv').hide();
LDAPRealmChallengeHandler.submitFailure();
});
LDAPRealmChallengeHandler.submitLoginFormCallback = function(response) {
var isLoginFormResponse = LDAPRealmChallengeHandler.isCustomResponse(response);
if (isLoginFormResponse){
LDAPRealmChallengeHandler.handleChallenge(response);
} else {
$('#AppDiv').show();
$('#AuthDiv').hide();
LDAPRealmChallengeHandler.submitSuccess();
}
};
LDAPApp.js
function wlCommonInit(){
// Common initialization code goes here
}
function getSecretData(){
var invocationData = {
adapter: "DummyAdapter",
procedure: "getSecretData",
parameters: []
};
WL.Client.invokeProcedure(invocationData, {
onSuccess: getSecretData_Callback,
onFailure: getSecretData_Callback,
timeout: 2000
});
}
function getSecretData_Callback(response){
$("#resultDiv").html(new Date() + "<hr/>");
$("#resultDiv").append("Secret data :: " + response.invocationResult.secretData);
}
DummyAdaptor.xml
<displayName>DummyAdapter</displayName>
<description>DummyAdapter</description>
<connectivity>
<connectionPolicy xsi:type="http:HTTPConnectionPolicyType">
<protocol>http</protocol>
<domain>none</domain>
<port>80</port>
</connectionPolicy>
<loadConstraints maxConcurrentConnectionsPerNode="2" />
</connectivity>
<procedure name="getSecretData" securityTest="LDAPSecurityTest" />
</wl:adapter>
function getSecretData(){
return {secretData: 1234};
}
authenticationConfig.xml
<securityTests>
<customSecurityTest name="LDAPSecurityTest">
<test realm="wl_directUpdateRealm" step="1"/>
<test isInternalUserID="true" realm="LDAPRealm"/>
</customSecurityTest>
</securityTests>
<realms>
<realm loginModule="LDAPLoginModule" name="LDAPRealm">
<className>com.worklight.core.auth.ext.FormBasedAuthenticator</className>
<onLoginUrl>/console</onLoginUrl>
</realm>
</realms>
<loginModules>
<loginModule name="rejectAll">
<className>com.worklight.core.auth.ext.RejectingLoginModule</className>
</loginModule>
<loginModule name="LDAPLoginModule">
<className>com.worklight.core.auth.ext.LdapLoginModule</className>
<parameter name="ldapProviderUrl" value="ldap://xyz"/>
<parameter name="ldapTimeoutMs" value="120000"/>
<parameter name="ldapSecurityAuthentication" value="none"/>
<parameter name="validationType" value="exists"/>
<parameter name="ldapSecurityPrincipalPattern" value="{username}@in.ibm.com"/>
<parameter name="ldapSearchFilterPattern" value="(&(mail=%v)(|(objectclass=ibmPerson)(objectclass=eperson)))"/>
<parameter name="ldapSearchBase" value="c=in,ou=bluepages,o=ibm.com"/>
</loginModule>
</loginModules>
</tns:loginConfiguration>
您不需要在领域定义中指定onLoginUrl，只需删除它即可。它用于在成功登录后将客户端转发到特定位置，这与移动应用无关 请显示DummAdapter XML文件。您确实将安全测试添加到了getSecretData中吗？请查看Marcel Stor的这篇博文：