{"id":2316,"date":"2017-03-02T13:00:37","date_gmt":"2017-03-02T11:00:37","guid":{"rendered":"http:\/\/hasselba.ch\/blog\/?p=2316"},"modified":"2017-03-02T13:00:37","modified_gmt":"2017-03-02T11:00:37","slug":"domino-rest-accessing-dominos-environment-check-authentication","status":"publish","type":"post","link":"https:\/\/hasselba.ch\/blog\/?p=2316","title":{"rendered":"Domino & REST: Accessing Domino’s Environment \/ Check Authentication"},"content":{"rendered":"

If we want to access Domino’s Environment, it is the ContextInfo\u00a0<\/em>class which gives us all we need. Everything you need to do to use the class is described in an earlier blog post<\/a>.<\/p>\n

The class gives mainly access to the following methods:<\/p>\n\n\n\n\n\n\n\n\n\n\n\n
Method<\/strong><\/td>\nDescription<\/strong><\/td>\n<\/tr>\n<\/tbody>\n
getDataDirectory()<\/td>\nPath to notes data directory<\/td>\n<\/tr>\n
getEnvironmentString(String envName)<\/td>\nReturns the environment variable<\/td>\n<\/tr>\n
getServerDatabase()<\/td>\nThe actual database as NAPI object, if any<\/td>\n<\/tr>\n
getServerVariable(String varName)<\/td>\nVariables from the Request, i.e. „QUERY_STRING“<\/td>\n<\/tr>\n
getUserDatabase()<\/td>\nThe actual database as Domino Java object, if any<\/td>\n<\/tr>\n
getUserSession()<\/td>\nThe session of the actual user performing the request (<\/td>\n<\/tr>\n
isAnonymous()<\/td>\ntrue if the current user is Anonymous<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n

Keep in mind that the incoming request is independently of any underlying Notes database. In\u00a0our example, the URI http:\/\/your.server\/dominorestservlet\/helloworld\/\u00a0<\/em>does not run inside of a NSF, that’s why the getServerDatabase()<\/em> and the getUserDatabase()<\/em> methods returns\u00a0null<\/em>.<\/p>\n

As a consequence, our servlet does not have any access restriction and is reachable as anonymous. If you want to access a database programatically, the „normal“ Domino access control\u00a0is\u00a0intervening again, but we can\u00a0do the access check by ourself.<\/p>\n

To prevent the access to the servlet, I have added a „checkAuthentication<\/em>“ method to the\u00a0RestApiServlet<\/a> class. This method checks if the current user is a) not anonymous and b) a member of the group RESTAPIAccessAllowed<\/em>. The method throws a\u00a0NotAuthenticatedException<\/em>\u00a0which let’s the servlet return a HTTP 403<\/a>.<\/p>\n","protected":false},"excerpt":{"rendered":"

If we want to access Domino’s Environment, it is the ContextInfo\u00a0class which gives us all we need. Everything you need to do to use the class is described in an earlier blog post. The class gives mainly access to the … Weiterlesen →<\/span><\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[120,114,89,116,61],"tags":[118,7,11,115,31,65,60,12],"class_list":["post-2316","post","type-post","status-publish","format-standard","hentry","category-apache-wink","category-jackson","category-java","category-jee","category-rest","tag-apache-wink","tag-domino","tag-http","tag-jackson","tag-java","tag-osgi","tag-rest","tag-web"],"_links":{"self":[{"href":"https:\/\/hasselba.ch\/blog\/index.php?rest_route=\/wp\/v2\/posts\/2316","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/hasselba.ch\/blog\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/hasselba.ch\/blog\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/hasselba.ch\/blog\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/hasselba.ch\/blog\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=2316"}],"version-history":[{"count":8,"href":"https:\/\/hasselba.ch\/blog\/index.php?rest_route=\/wp\/v2\/posts\/2316\/revisions"}],"predecessor-version":[{"id":2324,"href":"https:\/\/hasselba.ch\/blog\/index.php?rest_route=\/wp\/v2\/posts\/2316\/revisions\/2324"}],"wp:attachment":[{"href":"https:\/\/hasselba.ch\/blog\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=2316"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/hasselba.ch\/blog\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=2316"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/hasselba.ch\/blog\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=2316"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}