Hi Reetam Kansabanik,
Like Pai mentioned, you would need a custom authenticator that when you find they are no longer authenticated, issue a server side “soft redirect” to their login page. We don’t have out of the box support for this in ThingWorx, so you need create an extension yourself.
1. please download ThingWorx Extension SDK from:https://support.ptc.com/appserver/auth/it/esd/product.jsp?prodFamily=TWX
2. Create an extension yourself following generic procedures how to create an extension. Remember to create a new java class extending CustomAuthenticator.
Example code that does this:
public class AuthenticatorImpl extends CustomAuthenticator
{
private String user;
private String requestUrl;
private String password;
private boolean isFormLogin;
private boolean isRedirect;
public AuthenticatorImpl()
{
user = null;
requestUrl = null;
password = null;
isFormLogin = true;
isRedirect = false;
}
public boolean matchesAuthRequest(HttpServletRequest httpRequest)
throws AuthenticatorException
{
requestUrl = httpRequest.getRequestURL().toString();
if((!requestUrl.contains("action-login")) & (!requestUrl.contains("FormLogin")))
{
isFormLogin = false;
isRedirect = true;
setRequiresChallenge(true);
} else
if(requestUrl.contains("action-login"))
{
user = httpRequest.getParameter("thingworx-form-userid");
password = httpRequest.getParameter("thingworx-form-password");
}
return true;
}
public void authenticate(HttpServletRequest httpRequest, HttpServletResponse httpResponse)
throws AuthenticatorException
{
setCredentials(user, password);
}
public void issueAuthenticationChallenge(HttpServletRequest httpRequest, HttpServletResponse httpResponse)
throws AuthenticatorException
{
if(isRedirect)
{
String urlString = "/Thingworx/FormLogin/Everyone";//replace with your own organization
try
{
httpResponse.sendRedirect(urlString);
}
catch(IOException e)
{
e.printStackTrace();}
}
}
}
3. Import the extension you created into ThingWorx platform, and then open Security->Authenticators,
you will find the authenticator you created, and please set a priority and click Enabled to take it into effect.
4. Next time when session time out or you manually log out, it will redirect you back to the Form login page.
Hope this helps,
Br,
Anna
