Plain Http Sender adapter - user details

[Former Member]

Hi experts,

I am working with plain HTTP Adapters, a Java client is sending a HTTP request to XI server......the following url is used

http://server:post//sap/xi/adapter_plain?namespace=<namespace>&interface=<Interface>.

&sap-user=<user>&sap-password=<password>

Now, I understand that, the logon credential needed to reach XI Server is being passed as url parameters and this seems to work.

Is there any other way to pass this information apart from the URL? Does anyone has any sample java code that posts HTTP request to XI/PI and the logon details is sent via code or some mechanism apart from the URL.

Thank you.

Sabbir

[stefan_grube]

Maybe this page helps you:

http://www.kennethballard.com/Projects/HttpClient/readme-java.html

"Call setUserInfo() if a username and password are required to access the given URL."

httpConfig.setUserInfo(user, password);

Regards

Stefan

[Former Member]

Thank yoyu stefan,

This is exactly what I am after.

Sabbir

[Former Member]

Hi Sabbir,

I have maintained the user id and pw in SICF transaction for the http service, there you can maintain the log on data, user as XIAPPLUSER and its corresponding password and the procedure you can select as standard logon data.

Thanks,

Raj

[stefan_grube]

> I have maintained the user id and pw in SICF transaction for the http service, there you can maintain the log on data, user as XIAPPLUSER and its corresponding password and the procedure you can select as standard logon data.

This is strictly not recommended as this is a security leak.

Regards

Stefan

[Former Member]

Hi !

Maybe in the real application the complete url will not be seen by the user, but also you can use the SOAP adapter instead the HTTP adapter to make a HTTP post, using the SOAP you don't need to have the login and password in your http url. There is a "noSOAP" mode in the SOAP adapter that you can use to make non-web service calls, that work as HTTP calls.

Regards,

Matias

ps: please award points if helpful.

[Former Member]

Dear Matias,

Can you please explain a bot more on the noSOAP mode of the SOAP adapter. If no login and password is needed to send http call - how does the authentication happen?

There has to be some form of authentication - not anybody and everybody should be able to post.

Sabbir

[Former Member]

Hi !

Authentication DO occur, but the credentials don't appear in the URL !

Check this thread:

Regards,

Matias.