download of reports are unauthenticated

18173
Reporter: hoefft
Type: NewFeature
Summary: download of reports are unauthenticated
Priority: Minor
Resolution: Done
Status: Done
Created: 2016-01-25 14:12:36.54
Updated: 2016-02-25 12:19:00.585
Resolved: 2016-02-25 12:19:00.58
        
Description: When downloading reports there is currently no authentication. The data is available via the portal so it is currently not an issue. But at some point it might be interesting to authenticate downloads.

Considered solutions:
One solution could be to create a one time token via the API that could be used for downloads when using the UI. Another could be to download it as a blob in the UI, encode it and create an temporary iframe or download link with the dataURI.]]>
    

Author: cgendreau
Comment: The current issue is that the download of a report (using the UI) is done by call the api URL and the authentication information are not passed in the headers.
Created: 2016-01-25 16:08:08.417
Updated: 2016-01-25 16:08:08.417

Author: hoefft
Created: 2016-01-25 16:17:14.772
Updated: 2016-01-25 16:17:14.772
        
Yes it is just a link to the URL that returns the csv. It is simpy an  tag currently.

We also displays the csv in the interface, and downloading the displayed data is also an option, but the encoding is UTF8 if it goes through the UI (and hence have the auth header) and then it doesn't work as it should in excel on windows. Since Excel prefers windows-1252 encoding. There might be a good and simple solution. But seemingly people use all kinds of odd hacks with Flash components etc. It seems that the easiest solution is to use a one time link with a token.