Closed TomasKulhanek closed 7 years ago
We have done that before in Django using https://docs.djangoproject.com/en/1.10/topics/signing/#protecting-complex-data-structures
I'll add a way to generate these urls to the authentication code.
test /api/authproxy/get_signed_url/
have a temporary WEBDAV URL for the user’s virtual folder in the form https://portal.west-life.eu/webdav/{hash_code}/ which will have the same access to the user’s WEBDAV as the proposed URL https://portal.west-life.eu/webdav/username/ but without the need to pass authentication (have valid session id cookie). This may cover WEBDAV clients who don’t support cookie based authentication or portal or services which may need direct access to specified files for a limited time.
It should expire e.g. when user explicitly logs out from west-life portal, or e.g. after some period (1-14 days).
AFAIK, this type of temporary URL was already introduced in the LUNA prototype implementation of VF in Django. This is also the way SCIPION web tools present some unique URL with hash which gives user access to his EM cryo workflow project.