====== Autologin via Proxy for 3DM Viewer (Publisher) ======

This page is a glossary and bundles technical documentation about the "publisher_3dm" service and some advanced configurations. 

===== Autologin using Request Header =====

Generate a single-sign-on setup by injecting username/password in the request header using a proxy server. \\ 
The Proxy configuration is not part of Orbit 3DM Publisher.

{{:262:publisher:autologinnoproxy_2023-10-19_134318.png?400|}}
{{:262:publisher:autologinwithproxy_2023-10-19_134318.png?520|}}

==== X-Orbit-Autologin header ====

"X-Orbit-Autologin" header needs to contain a base64-encoded string of the form "<username>:<password>".

<code>X-Orbit-Autologin: dGVzdDp0ZXN0MTIz</code>

Pseudocode example (user=test,pwd=test123) \\
base64("test:test123") == "dGVzdDp0ZXN0MTIz

==== Autologin to specific Publication ====

The sequence of login verifications completed by the 3DM Viewer - 3DM Publisher Server to open a specific Publication in the 3DM Viewer: \\
<Publisher Server Url>/publication/<Publication Name>?<XXX>

  - Guest User access, no login credentials required via "session" request
  - Named User access, username/password set by "X-Orbit-Autologin" request header of "login" request.
  - Named User access, username/password entered by the user via the login panel.

=== Request Header in "login" request ===

If the "autologin" URL query argument is present, then the 3DM Viewer initiates automatically a "login" request with dummy credentials to be picked up by an intermediate proxy server. The proxy server has then the option to insert login credentials via the "X-Orbit-Autologin" request header of the "login" request.  \\
If the "X-Orbit-Autologin" request header is found, the 3DM Publisher Server will validate the "login" request with the credentials as set by the "X-Orbit-Autologin" request header of the "login" request. 

If this fails, then the 3DM Viewer prompts the login without presetting the user credentials as set by the "X-Orbit-Autologin" request header.

==== Autologin to Publications Overview ====

The sequence of login verifications completed by the 3DM Viewer - 3DM Publisher Server to open the Publications Overview in the 3DM Viewer: \\
<Publisher Server Url>/viewer/?<XXX>

  - Named User access, username/password set by "X-Orbit-Autologin" request header of "publication_names" request.
  - Named User access, username/password entered by the user via the login panel.

=== Request Header in "publication_names" request ===

If the "autologin" URL query argument is present, then the 3DM Viewer initiates automatically a "publication_names" request with dummy credentials to be picked up by an intermediate proxy server. The proxy server has then the option to insert login credentials via the "X-Orbit-Autologin" request header of the "publication_names" request.  \\
If the "X-Orbit-Autologin" request header is found, the 3DM Publisher Server will validate the "publication_names" request with the credentials as set by the "X-Orbit-Autologin" request header of the "publication_names" request. 

If this fails, then the 3DM Viewer prompts the login without presetting the user credentials as set by the "X-Orbit-Autologin" request header.