next »

[Jos? V.]

We are currently migrating our authentication protocol to GIP on an app tha previously authenticated via system users(ssh login and GDC/putty).

I have sucessfully set up the OpenIDConnectServiceProvider delegate service as described in the manual and everything works as expected.

But we have some modules within the app that ask for authentication via a form as a way to ensure the supervisor authorized the module to be ran.

Is there a way to call the delegate service from BDL code for the supervisor to authenticate while the app waits for it to respond and then act acordingly?

The only way I found to do this is to ask for a token with grant_type = "password".
But this leaves the task of asking the user and password to the app which might be seen as a security problem(the legacy system user verification has this issue).

Thank you

[Sisavanh S.]

Hi,

We do not provide means to do authentication or retrieve scopes in the middle of an application.
Usually you retrieve the information at the startup of the application.
As an example, see the "ConsoleApp" in $FGLDIR/web_utilities/services/gip/src/console/ConsoleApp.4gl
The ConsoleApp displays different menu when you are an admin or a simple user.

If you need more details please contact your local support center.

Regards,
Sisa.