topic header authentication dynamic user directory in Integration, Extension & APIs

header authentication dynamic user directory

duschking — Tue, 15 Apr 2025 12:57:54 GMT

i need to access an APP from linux without active directory access.

i configured vrutal proxy - added load balancing and add assoociated proxy

but how to i configure the webpage now.. i cant find a good example how to call the app on the hub...

can any1 help?

Re: header authentication dynamic user directory

rwunderlich — Tue, 15 Apr 2025 14:34:35 GMT

You need to include a matching header ("hdr-usr" in your case). An easy way to do this is with a browser plugin like Modheader.

-Rob

Re: header authentication dynamic user directory

duschking — Wed, 16 Apr 2025 08:53:22 GMT

yeah i did this. .but thats not all.

after many trys i get the following error in my browser

has been blocked by CORS policy: Response to preflight request doesn't pass access control check: It does not have HTTP ok status.

i configured the virutal proxy udner advanced like this:

Re: header authentication dynamic user directory

duschking — Wed, 16 Apr 2025 12:11:58 GMT

this thing is so strange - can any1 help here?

i got the virtual proxy settings now correct i think....

advanced:

Access-Control-Allow-Origin:http://xxx.yyy.com
Access-Control-Allow-Credentials: true
Access-Control-Allow-Methods: GET, POST
Access-Control-Allow-Headers: hdr-usr

return from website unter network ist 200 ok..

but console says:

and when i open this msg...

<!doctype html>
<html lang="en" qva-bootstrap="false" class="single-full-height" ng-controller="singleObjectCtrl" ng-class="{'no-scroll': loading}">
<head>
<meta http-equiv="X-UA-Compatible" content="IE=edge,chrome=1">
<title>Single Object</title>
<base href="./">
<meta charset="utf-8">
<meta name="HandheldFriendly" content="True">
<meta name="MobileOptimized" content="320">
<meta name="viewport" content="width=device-width,initial-scale=1,maximum-scale=1,minimum-scale=1,user-scalable=no,minimal-ui">
<meta name="apple-mobile-web-app-capable" content="yes">
<meta name="apple-mobile-web-app-status-bar-style" content="black">
<meta http-equiv="cleartype" content="on">
<link rel="shortcut icon" href="../resources/favicon.ico">
<link rel="apple-touch-icon" href="../resources/img/core/logo/Sense_120x120.png">
<link rel="apple-touch-icon" sizes="152x152" href="../resources/img/core/logo/Sense_152x152.png">
<link rel="apple-touch-icon" sizes="167x167" href="../resources/img/core/logo/Sense_167x167.png">
<link rel="apple-touch-icon" sizes="180x180" href="../resources/img/core/logo/Sense_180x180.png">
<style>
.sr-only {
position: absolute;
width: 1px;
height: 1px;
padding: 0;
margin: -1px;
overflow: hidden;
clip: rect(0, 0, 0, 0);
white-space: nowrap;
border-width: 0;
}

.hidden-screen-reader-label {
position: absolute;
left: -9999px;
top: -9999px;
}
</style>
<script src="../resources/main.js" data-namespace="QlikMain"></script>
</head>
<body class="qw single-full-height qv-client">
<div class="qv-preload-icons" style="opacity: 0">.</div>
<div class="qv-preload-font" style="opacity: 0">.ὰ</div>
<div class="qv-preload-font-bold" style="opacity: 0">.ὰ</div>
<div id="qv-stage-container" class="single-full-height">
<div id="single-object" class="single-object" ng-class="{'noanimate': options.noAnimate}" role="application">
<div id="CURRSELPANEL"></div>
<div id="grid-wrap" class="single-full-height" ng-if="!sheetHidden" ng-keydown="keyDown($event)" ng-focus="onFocus()" tabindex="0">
<div class="single-full-height" id="grid">
<label class="hidden-screen-reader-label">{{embeddedSheetScreenReader}}</label>
<article role="contentinfo" qva-radial-context-menu="openContextMenu($event)" qva-context-menu="openContextMenu($event)" id="content" ng-class="{'selections-disabled' : options.noSelections, 'reduce-top-padding': reduceTopPadding}" ng-keydown="keyDown($event)"></article>
<qv-spinner class="single-load-indicator" show="loading"></qv-spinner>
<div id="download-dialog-single"></div>
</div>
</div>
<div id="qv-page-container" ng-class="{'qv-panel-wrap' : sheetHidden}" ng-if="sheetHidden">
<div id="qs-page-container">
<div class="qs-view-error qs-view-error__align">
<div class="qs-view-error__center">
<div class="qs-view-error__image" tid="errorMsgHiddenSheet">
<img ng-src="{{sheetHiddenSvg}}"/>
</div>
<div class="qs-view-error__title" q-translation="{{title}}"></div>
<div class="qs-view-error__message" q-translation="{{message}}"></div>
</div>
</div>
</div>
</div>
</div>
</div>
<script type="module">
// apply feature overrides
const [{addInterceptors},{features}] = await Promise.all([QlikMain.import("@qlik-trial/qmfe-core"), QlikMain.import("@qlik-trial/qmfe-api")]);
addInterceptors();
const {data: featureFlags} = await features.getFeatures({
hostConfig: {
host: QlikMain.getRootUrl()
}
}).catch( () => ({
data: {}
}));
await QlikMain.applyFeatureOverrides(featureFlags);
// load devtool
const isProdUrl = window.location.host.endsWith(".qlikcloud.com");
const devtoolEnabled = window.localStorage.getItem("devtools") === "true";
if (devtoolEnabled && !isProdUrl) {
await QlikMain.import("@qmfe/devtool");
}
// start main qmfe parcel
QlikMain.import("@qmfe/sense-client/single");
</script>
</body>
</html>

Re: header authentication dynamic user directory

duschking — Fri, 25 Apr 2025 04:39:51 GMT

ich habe inzw. sehr viel zeit mit diesem thema verbracht. es funktioniert einfach nicht über einen virutal proxy ein app darzustellen.

vorab - das mit dem modheader funktioniert -> diesen dürfen wir in der firma aber nicht verwenden !!!

um die entsprechende header information an qliksense weiterzugeben habe ich sehr viele möglichkeiten

probiert komme aber immer zu gleichen ergebnis.

(network)

Request Method:GET

Status Code: 304 not modified

console:

main.js:1 Uncaught SyntaxError: Unexpected token '<' (at main.js:1:1)
(index):17 Uncaught ReferenceError: QlikMain is not defined
at (index):17:68

die einfachste methode ist den header über nginx mitzusenden. was auch funktioniert

leider wird die retourantwort nicht dargestellt. egal welche methode egal welche art ich probiere.

qlik support hat auch keine ahnung oder will keine haben ?!?!

wenn man das feature virtual proxy mit client authentication nicht nutzen kann, warum bietet qlik das überhaupt an ?!?