[ovirt-devel] [UI plugins] RestApiSessionAcquired is out, api.ssoToken() is in
Hi everyone,
we've merged a patch that aligns UI code with Engine SSO infra:
https://gerrit.ovirt.org/#/c/49278/
In particular, UI code that creates & maintains REST webapp's
HTTP session was removed in favor of using SSO token.
**UI plugin authors take note!** The "RestApiSessionAcquired"
callback was removed -- please update your UI plugins to use
the new "api.ssoToken" function when making REST API requests:
var xhr = new XMLHttpRequest();
xhr.open('GET', 'http://example.com/ovirt-engine/api');
xhr.setRequestHeader('Authorization', 'Bearer ' + api.ssoToken());
xhr.setRequestHeader('Accept', 'application/json');
xhr.addEventListener('load', function () {
// response loaded OK, parse JSON data
var data = JSON.parse(this.responseText);
});
xhr.send();
While being a breaking change, this should simplify UI plugin
code because:
- the new "api.ssoToken" function can be called anytime,
removing the need for an asynchronous callback
- no need to use session-specific request headers anymore
(like "Prefer: persistent-auth" and "JSESSIONID: xxx"),
just use "Authorization: Bearer xxx" and you're good
Please see commit msg of above mentioned patch for further
details on the changes and their implications.
Let me know if you have any questions or comments.
Regards,
Vojtech