topic Re: Authenticating with QlikSense server from a web application in Integration, Extension & APIs

Authenticating with QlikSense server from a web application

Mon, 20 Feb 2017 11:55:19 GMT

Hi,

Looking for some advice as I've found the QlikSense server documentation very confusing around authentication.

I have an AngularJS app, hosted on Tomcat on Windows, which users log in to via the initial login page. I was instructed by Qlik to look on Qlik Branch to get some Java code that would obtain a Qlik ticket to use for authentication against the QlikSense server. This works fine, and the ticket is returned to my app.

This isn't enough apparently to authenticate with Qlik Sense. I was instructed to create then hit a static html file on the Qlik server itself, passing the ticket in the URL, and redirecting back to my app.

My issue is that this seems a very clunky process - Both having to use bespoke code and then hit a URL with a redirect, which is causing me issues as the web app is hosted on Tomcat (HTTP) and QlikSense on another web server (HTTPS) causing certificate and cross-site issues.

Does anyone know a cleaner or easier way to authenticate, especially replacing or doing away with the URL/redirect part. I've heard mention that when including a Qlik App via the single configurator the ticket can be appended to the URL, but I've not seen this documented anywhere.

Thanks in advance,

Lee

Re: Authenticating with QlikSense server from a web application

Alexander_Thor — Mon, 20 Feb 2017 12:31:10 GMT

Hmm, the redirect is not necessary.

Once you have a ticket issued for your client you can request a static resource from behind the proxy with qlikTicket=<ticket value> appended to the url.

The proxy will see the incoming ticket, make sure it's valid and if so send back the resource and a session cookie which will authenticate subsequent requests. Normal web rules apply so make sure http headers are correct so cookies are allowed between protocols and domains.

Re: Authenticating with QlikSense server from a web application

Mon, 20 Feb 2017 13:27:04 GMT

Thanks for getting back so quickly Alexander.

I'll give that a go - Makes sense to get the headers right first to remove them from the equation.

Lee