Hide p_auth from URL

[Anil T, geändert vor 7 Jahren.]

Hi ,

I have seen some articles about p_auth enable and disable process. I have enabled p_auth and now need to hide from URL. Any one from this community has done this?

Clearly I want p_auth to be enabled and hide from URL. Please let me know your views.

Thanks,
Anil T

[Devang Patel, geändert vor 7 Jahren.]

Hi Anil,

There is one property in portal-ext.properties file.

 
 #
# Input a list of comma delimited struts actions that will not be checked
# for an authentication token.
#
auth.token.ignore.actions=\
        /asset/rss,\
        \
        /asset_publisher/edit_article_discussion,\
        /asset_publisher/edit_entry_discussion,\
        /asset_publisher/edit_file_entry_discussion,\
        /asset_publisher/edit_page_discussion,\
        \
        /blogs/edit_entry,\
        /blogs/edit_entry_discussion,\
        /blogs/rss,\
        /blogs/trackback,\
        \
        /blogs_aggregator/edit_entry,\
        /blogs_aggregator/edit_entry_discussion,\
        /blogs_aggregator/rss,\
        \
        /document_library/edit_file_entry,\
        /document_library/edit_file_entry_discussion,\
        \
        /document_library_display/edit_file_entry,\
        /document_library_display/edit_file_entry_discussion,\
        \
        /journal/edit_article_discussion,\
        /journal/rss,\
        \
        /journal_content/edit_article_discussion,\
        \
        /image_gallery_display/edit_file_entry,\
        /image_gallery_display/edit_image,\
        \
        /login/create_account,\
        /login/login,\
        \
        /message_boards/edit_discussion,\
        /message_boards/edit_message,\
        /message_boards/rss,\
        \
        /my_sites/view,\
        \
        /page_comments/edit_page_discussion,\
        \
        /shopping/edit_order_discussion,\
        \
        /software_catalog/edit_product_entry_discussion,\
        \
        /wiki/edit_page,\
        /wiki/edit_page_attachment,\
        /wiki/edit_page_discussion,\
        /wiki/get_page_attachment,\
        /wiki/rss,\
        \
        /wiki_admin/edit_page_attachment,\
        \
        /wiki_display/edit_page_attachment,\
        /wiki_display/edit_page_discussion

If you remove any struts action from above code then p_auth will be enabled for that action.
I checked with removing " /message_boards/edit_discussion,\
/message_boards/edit_message,\" this property to enable p_auth for message board portlet.
Make sure that syntax won't break.

You can also try this property

 #
    # Set a list of comma delimited portlet ids that will not be checked for an
    # authentication token.
    #
    auth.token.ignore.portlets=82

Regards,
Devang Patel

[Anil T, geändert vor 7 Jahren.]

Thanks Devang.

My requirement is not to disable p_auth token or skip authentication for any action. I need information to hide p_auth from URL parameters. It should work with normal p_auth paraeter authentication.