h2020-westlife-eu / virtualfolder

Virtual Folder
http://internal-wiki.west-life.eu/w/index.php?title=D6.1
MIT License
1 stars 0 forks source link

Temporary WEBDAV URL with hash code instead of username in the path #21

Closed TomasKulhanek closed 7 years ago

TomasKulhanek commented 7 years ago

have a temporary WEBDAV URL for the user’s virtual folder in the form https://portal.west-life.eu/webdav/{hash_code}/ which will have the same access to the user’s WEBDAV as the proposed URL https://portal.west-life.eu/webdav/username/ but without the need to pass authentication (have valid session id cookie). This may cover WEBDAV clients who don’t support cookie based authentication or portal or services which may need direct access to specified files for a limited time.

It should expire e.g. when user explicitly logs out from west-life portal, or e.g. after some period (1-14 days).

AFAIK, this type of temporary URL was already introduced in the LUNA prototype implementation of VF in Django. This is also the way SCIPION web tools present some unique URL with hash which gives user access to his EM cryo workflow project.

Benzene commented 7 years ago

We have done that before in Django using https://docs.djangoproject.com/en/1.10/topics/signing/#protecting-complex-data-structures

I'll add a way to generate these urls to the authentication code.

TomasKulhanek commented 7 years ago

test /api/authproxy/get_signed_url/

TomasKulhanek commented 7 years ago