Ecosyste.ms: Awesome
An open API service indexing awesome lists of open source software.
https://github.com/gregorwolf/hanatrial-auth-proxy
SAP HANA Cloud Authentication Proxy for HANA XS
https://github.com/gregorwolf/hanatrial-auth-proxy
Last synced: 11 days ago
JSON representation
SAP HANA Cloud Authentication Proxy for HANA XS
- Host: GitHub
- URL: https://github.com/gregorwolf/hanatrial-auth-proxy
- Owner: gregorwolf
- License: apache-2.0
- Created: 2014-12-21T21:41:37.000Z (almost 10 years ago)
- Default Branch: main
- Last Pushed: 2021-03-20T09:16:55.000Z (over 3 years ago)
- Last Synced: 2024-10-11T02:35:21.144Z (28 days ago)
- Language: JavaScript
- Size: 56.6 KB
- Stars: 22
- Watchers: 7
- Forks: 8
- Open Issues: 4
-
Metadata Files:
- Readme: README.md
- License: LICENSE
Awesome Lists containing this project
README
# SAP HANA Cloud Trial Authentication Proxy for HANA XS Services
Due to the lack of SAML support for HTTP Destinations the only way to use HANA XS resources is through a proxy server. I try to implent it in node.js with inspirations from https://github.com/leftlogic/twitter-proxy.
## Concept
Provide a HTTP proxy that offers basic authentication to it's clients. The basic authentication information is taken and used to do a SAML authentication against the SAP ID Service. After a sucessful authentication the session cookies are cached in comination with the basic authentication information. The cache avoids a re-authentication for further requests.
## Setup
To play around with this feature, follow these steps:
* Install node.js from http://nodejs.org/
* Clone this repository and run `npm install` in the root folder
* Start the proxy server using `node examples/server-basic-auth.js`
* Install the SAP Cloud Connector and configure to secure the connection from the HANA Cloud Platform to you local proxy server
* or you use the new HTTPS support and generate a key with `openssl genrsa -out proxy-key.pem 2048`, a certificate signing request (CSR) with `openssl req -new -key proxy-key.pem -out proxy-csr.pem` and then let the sign by the free http://www.cacert.org/ until https://letsencrypt.org/ is available
To use this package in your node.js project, run either one of the following commands to install from Github:
```shell
# via https
npm install git+https://[email protected]/gregorwolf/hanatrial-auth-proxy.git
# via ssh
npm install git+ssh://[email protected]/gregorwolf/hanatrial-auth-proxy.git
```
## Changelog
* 2015-03-28: Maximilian Lenkeit transformed project in a proper Node.js module
* 2015-03-16: Added support for HTTP proxies
* 2015-01-18: Added support for HTTPS and session timeouts
* 2014-12-26: Support for HTTP GET, POST, PUT and DELETE. Tested with an SAPUI5 CRUD Applicaiton.
* 2014-12-23: There is a first working version!
### hana-saml.js
Does the heavy lifting to authenticate to the SAP ID Service and returns the session cookie for the HANA host.
It tries to call an SAML protected HANA XS service. The client stores the Cookies set by this site for further use. Without authentication the client is first forwarded to the SAP ID Service (https://accounts.sap.com/) where a HTML form is used for the login. Also this site sets some cookies which are neded for the following request. The HTML page is scraped and all input fields are taken with it's values. The input field for username and password are filled with the command line parameters. Then the page is submitted using an HTTP POST. The call includes the cookies stored before. A sucessful authentication results in another HTML page that contains hidden input fields with the SAML Authentication response that must be SAML endpoint of the HANA XS Engine (https://s6hanaxs.hanatrial.ondemand.com/sap/hana/xs/saml/login.xscfunc). To this request the Cookies saved from the initial call must be added.
### saml-client.js
Demonstrate a node.js HTTP client that takes the command line parameters and . It uses hana-saml.js to get an authenticated session cookie. Then the original HANA XS Service can be called with an authenticated user. The returned data is written to the console log.
### server-basic-auth.js
Demonstrates a simple HTTP Server that requires basic authentication. It uses hana-saml.js to get an authenticated session cookie. Then the original HANA XS Service can be called with an authenticated user. Then the original HANA XS Service can be called with an authenticated user. The returned data is sent to the requesting browser. A session cache avoids a re-authentication for further requests.
TODO
----
* Error handling when username / password is incorrect
* Support for corporate proxies missing authentication support