Hi,
I'm working for the GeoNetwork (BlueNet) UI project on a XForms based interface for editing the metadata documents. As XForms client Orbeon is used, which has a heavy server-sided component.
Orbeon requests metadata document from GeoNetwork services that returns XForms. The problem is the authentication, when e.g. documents aren't public. Orbeon acts like a client (normally the browser), but has no Cookie support. So you can't just login over the normal interface and use that session for Orbeon, too.
Does anyone have a good suggestion how to handle this problem? Perhaps adding functionality to send the session-id with the request (POST or GET) instead of the Cookie?
Cheers,
Volker