Deploy URL preview
To deploy URL preview within Connections we must define a system user as a proxy for the oEmbed/image proxy services so that it can perform HTTP requests.
IBM Connections can be configured to force user authentication prior to accessing public information. When IBM Connections is configured to force authentication, the following steps must be performed in order to allow the oEmbed / image proxy services to perform HTTP requests to access the public information on the Connections platform:
- Define a new "system" user in the user repository that can log into Connections. In the following steps, the oEmbed / image proxy is configured to log in as this "system" user when performing HTTP request against Connections resources. To avoid leaking private resources from Connections, it is important to ensure that this user does not have access to any private resource on the Connections environment such as not being a member of a community, or a participant in an activity, and so on.
- This "system" user only should be used for the oEmbed / image proxy purposes (as opposed to also be an actual end-user on the platform).
- Do not use the default admin user, since administrative users have access to all Connections content (including private content).
- Create a new JAAS authentication alias named oembedJAASAuth and set the username and password of the user defined in step 1.
The name of the JAAS authentication alias used by the service can be configured in the og-config.xml file as described in Configure URL preview .
- In the og-config.xml file, set the security.anonymousAccess attribute to true.
- Synchronize the WAS nodes and restart the URL Preview application to apply the settings.
Parent topic:
Post-installation tasks