X-Git-Url: http://git.indexdata.com/?p=mkws-moved-to-github.git;a=blobdiff_plain;f=doc%2Fmkws-manual.markdown;h=fa86847542dafdc864dcde9bfe94253ba66d4305;hp=8b907a8479567f29f0f3988feba523a071ea8f0a;hb=a28667229f37a181910a8d5fff3815c1e3949057;hpb=8fda474f8138eeffb382532a509f280db3fd12ad diff --git a/doc/mkws-manual.markdown b/doc/mkws-manual.markdown index 8b907a8..fa86847 100644 --- a/doc/mkws-manual.markdown +++ b/doc/mkws-manual.markdown @@ -413,22 +413,25 @@ usual one. To arrange for this, set the username and password as a single string separated by a slash -- e.g. "mike/swordfish" -- into the User Access record's Authentication field. -You can create multiple User Access records: for example, one that -uses Referring URL, and another that uses a username/password pair to -be used when running an application from a different URL. +You can set multiple fields into a single User Access record; or +create multiple User Access records. For example, a single User Access +record can specify both a Referring URL a username/password pair that +can be used when running an application from a different URL. But if +multiple Referring URLs are needed, then each must be specified in its +own User Access record. ### Tell the application to use the library In the HTML of the application, tell MKWS to authenticate on to the -Service Proxy. When IP-based, referer-based or hostname-based -authentication is used, this is very simple: +Service Proxy. When referer-based or IP-based authentication is used, +this is very simple: -> TODO This should be the default setting +> TODO This should be the default setting: see **MKWS-251**. And ensure that access to the MWKS application is from the correct Referrer URL or IP-range. @@ -439,13 +442,14 @@ When hostname-based authentication is in use, it's necessary to access the Service Proxy as the correctly named virtual host. This can be done by setting the `service_proxy_auth` configuration item to a URL containing that hostname, such as - +`//yourname.sp-mkws.indexdata.com/service-proxy/?command=auth&action=perconfig` > TODO It should be possible to change just the hostname without -> needing to repeat the rest of the URL (protocol, path, query) +> needing to repeat the rest of the URL (protocol, path, query): see +> **MKWS-252**. > TODO When changing the SP authentication URL, the Pazpar2 URL should -> in general change along with it. +> in general change along with it: see **MKWS-253**. ### (Optional): embed credentials for access to the library @@ -453,10 +457,11 @@ When credential-based authentication is in use (username and password), it's necessary to pass these credentials into the Service Proxy when establishing the session. This can most simply be done just by setting the `service_proxy_auth` configuration item to a URL such as - +`//sp-mkws.indexdata.com/service-proxy/?command=auth&action=perconfig&username=mike&password=swordfish` > TODO It should be possible to add the username and password to the -> configuration without needing to repeat the rest of the URL. +> configuration without needing to repeat the rest of the URL: see +> **MKWS-254**. ### (Optional): conceal credentials from HTML source @@ -474,15 +479,16 @@ to that local authentication URL. Here is one way to do it when Apache2 is the application's web-server, which we will call yourname.com: -- Add a rewriting authentication alias to the configuration: +Step 1: add a rewriting authentication alias to the configuration: RewriteEngine on - RewriteRule /spauth/ http://mkws.indexdata.com/service-proxy/?command=auth&action=check,login&username=U&password=PW [P] + RewriteRule /spauth/ http://sp-mkws.indexdata.com/service-proxy/?command=auth&action=check,login&username=U&password=PW [P] -- Set the MKWS configuration item `service_proxy_auth` to - -- Protect access to the local path - (e.g. using a .htaccess file). +Step 2: set the MKWS configuration item `service_proxy_auth` to + + +Step 3: protect access to the local path +(e.g. using a `.htaccess` file). Choosing targets from the library @@ -614,9 +620,9 @@ structure. 3. [10, 20, 30, 50] -4. http://mkws.indexdata.com/service-proxy-auth +4. http://sp-mkws.indexdata.com/service-proxy-auth -5. http://mkws.indexdata.com/service-proxy/ +5. http://sp-mkws.indexdata.com/service-proxy/ 6. [["relevance"], ["title:1", "title"], ["date:0", "newest"], ["date:1", "oldest"]] @@ -695,19 +701,19 @@ from that toolkit. The relevant lines are: ---- -Element Type Default Description --------- ----- --------- ------------ -popup_width string 880 Width of the popup window (if used), in - pixels. +Element Type Default Description +-------- ----- ------- ------------ +popup_width string 880 Width of the popup window (if used), in + pixels. -popup_height string 760 Height of the popup window (if used), in - pixels. +popup_height string 760 Height of the popup window (if used), in + pixels. -popup_button string input.mkwsButton (Never change this.) +popup_button string `input.mkwsButton` (Never change this.) -popup_modal string 0 Modal confirmation mode. Valid values are 0 or 1 +popup_modal string 0 Modal confirmation mode. Valid values are 0 or 1 -popup_autoOpen string 1 Open popup window on load. Valid values are 0 or 1 +popup_autoOpen string 1 Open popup window on load. Valid values are 0 or 1 ----