HPWe Delivery 151 Alternate method for passing user name and password in URL

2 Technical Note
Configuring HP Web Delivery 1.5.1 to Use an Alternate Method for Passing the User Name and Password
in a URL
This enhancement requires that you have a separate application that can encode the HP Web Delivery user name and
password using base64 encoding and that the application can pass the encoded user name and password to HP Web
Delivery in a URL with the following syntax:
http://<hpwdhost:port>/<script>/ibname/channel?eup=encoded-value
where
hpwdhost:port is the hostname and port number where HP Web Delivery is installed,
script is the HP Web Delivery script name,
ibname/channel is the parameter for the InfoBox/InfoChannel that needs to be loaded,
eup is the name of the attribute for passing the encoded user name and password, and
encoded-value is the base64-encrypted value of the string username:password.
If the base64-encoded value for the string username:password contains a URL-reserved character, such as "+",
"/", or "=", then these characters must be URL-encoded. For example, a "+" should be replaced by %2B in the
encoded string. For more information about encoding URL-reserved characters, refer to RFC 2396.
http://www.ietf.org/rfc/rfc2396.txt?number=2396
In the following example, "admin" is the user name and "abc" is the password for the user admin. The encoded
value for the string admin:abc is YWRtaW46YWJj.
http://<hpwdhost:port>/<script>/ibname/channel?eup=YWRtaW46YWJj
With this enhancement, HP Web Delivery 1.5.1 can accept the user name and password in the URL as a name-value
pair. The HP Web Delivery server sets a temporary cookie at the Web browser to store the encoded user name and
password sent in the URL. This cookie expires when the user closes the Web browser.
NOTE: Only the first occurrence of the name-value pair (for example, eup=YWRtaW46YWJ) will
be considered for authorization and will be removed from the URL, so that the user
credentials are not visible to the end user.
HP Web Delivery does not control the display of the URL in the Web browser status bar.
If the user name and password sent in the URL are incorrect, the Web browser will prompt the user for the user name
and password.