topic Re: [ICF Handler] Retrieve MYSAPSSO2 cookie in Application Development and Automation Discussions

[ICF Handler] Retrieve MYSAPSSO2 cookie

guillaume-hrc — Wed, 08 Aug 2012 13:39:10 GMT

Hi,

I would like to get the SAP Logon Ticket (MYSAPSSO2 cookie) from an ICF handler I am using. This would allow me to generate a SAP shortcut for later use.

I know that the SAP Logon Ticket is embedded in the request that is issued because I can see it with a "javascript:alert(document.cookie):".

Yet, I cannot retrieve it on the ABAP side using this code in my ICF handler:

DATA: lt_cookies TYPE TIHTTPCKI.
server->request->GET_COOKIES( CHANGING cookies = lt_cookies ).

Thanks in advance for your help.

Best regards,

Guillaume

Re: [ICF Handler] Retrieve MYSAPSSO2 cookie

hendrik_brandes — Wed, 08 Aug 2012 14:25:06 GMT

Hello Guillaume,

have you tried to get the ticket from the form fields:

DATA:
  l_sso_header TYPE string.
l_sso_header = server->request->get_form_field( 'mysapsso2' ).

Kind regards,

Hendrik

Re: [ICF Handler] Retrieve MYSAPSSO2 cookie

guillaume-hrc — Wed, 08 Aug 2012 20:37:54 GMT

Hello Hendrik,

Nope, does not work...

Worse, when you get the raw request using:

DATA: lo_converter   TYPE REF TO cl_abap_conv_in_ce,
         l_request_raw  TYPE xstring,
         l_request_str  TYPE string.
  l_request_raw = server->request->get_raw_message( ).    " le contenu brut a un MYSAPSS02 vide !
  lo_converter = cl_abap_conv_in_ce=>create( input = l_request_raw ).
  lo_converter->read( IMPORTING data = l_request_str ).

well... mysapsso2 is here but it's empty (as if being erased by the standard?)!

Why so many cautions when you can put it simply in an hidden form field on the client side??

Best regards,

Guillaume

Re: [ICF Handler] Retrieve MYSAPSSO2 cookie

hendrik_brandes — Thu, 09 Aug 2012 09:29:31 GMT

Hello Guillaume,

if your mysapsso2 is empty, you should check first you Instance-Parameters if SSO is activated. What are the values of this parameters:

Kind regards,

Hendrik

Re: [ICF Handler] Retrieve MYSAPSSO2 cookie

guillaume-hrc — Thu, 09 Aug 2012 09:59:11 GMT

Hi,

The SAP Logon TIcket is set, I can see it on the client side using javascript.

Besides, I am even capable of retrieving it if I call a BSP, inject the cookie in a form field and send it back to the backend (thanks Gregor Wolf and its ZAPP_INTEGRATOR tool).

The question is: how should I do the same thing using a 'mere' ICF handler because I do not want to open BSP pages on the client side (irritating fugitive IE screens all over the screen).

I am under the impression that, on the backend side, there is a great deal of effort that is done to prevent customer code to access SAP Logon Ticket...

Thanks.

Best regards,

Guillaume

Re: [ICF Handler] Retrieve MYSAPSSO2 cookie

athavanraja — Sat, 02 Mar 2013 12:29:36 GMT

Hi Guillaume,

Did you succeed in this? I am trying a similar stuff, any pointer would be helpful. Also i am trying to verfiy the signature as well.

Regards

Raja

Re: [ICF Handler] Retrieve MYSAPSSO2 cookie

guillaume-hrc — Mon, 04 Mar 2013 08:29:46 GMT

Hi Raja,

Unfortunately not...

I had to give up... for the time being.

I guess it is deleted for the request object way before your ICF handler is processed.

Best regards,

Guillaume