How to verify username/password of user without logging in?

Question

Hi all

Normally when we want to check whether user is authenticated ivy user or not, we use this api:

Ivy.session().loginSessionUser(userName, password)

But this api will also change the current login user to new one.

Is there any other api to verify user/pass without logout current user?

Because my process is an ivy webservice then it's run with system permission, if i use above api to verify another user it will throw exception that i can't logout of system user.

Thanks

Accepted Answer

1

Hi

You can create a new session. Then, use it to authenticate the user and finally destroy the session again.

See invisible API (API is not visible in content assist but is there and can be used):

ISession session = ivy.wf.getSecurityContext().createSession();
try
{
  session.loginSessionUser(...)
}
finally
{
  ivy.wf.getSecurityContext().destroySesssion(session.getIdentifier());
}

link

answered 01.02.2018 at 06:17

Reto Weiss ♦♦
4.9k●20●28●57
accept rate: 74%

thanks Reto Weiss ♦♦ it's helpful for me

(01.02.2018 at 07:27) trungdv

How to verify username/password of user without logging in?

Follow this question

Related questions