Implementation of a digital signature

Hello gch,

I believe your solution would require the development of a Custom Authenticator.

To get started I would recommend checking out the Create An Authentication Extension Guide on the ThingWorx Developer Portal.

-Tyler

Hi @gch.

If you found the previous post helpful, please mark it as the Accepted Solution for the benefit of the others with the same issue.

Thank you for your participation in our community!

Regards.

--Sharon

If you say that the authentication should be done by LDAP and that the user already sees the application, I would guess that the current user is already authenticated through LDAP.

I would try to create a very simple service VerifySignature (input parameters: User & Password, return boolean) that executes a separate GetText to one of the Thingworx APIs - like Thingworx/Things, where you pass the provided user and password to the GetText user and password input parameters. If you have setup LDAP auth in the ThingWorx server, then this authentication challenge will hit the LDAP - your required usecase.

If the result of that service contains a references to some Things - that would mean the authentication was successfull and you can return "true".

If the result of that service says: authentication unsuccessfull, or something like that, that means the supplied user and password were not good, and you can return "false".