jasperserver-pro user name and password is showing in url

[kchavda]

Hello,

in visualize.js    user name and password is showing in the link

localhost:8080/jasperserver-pro/j_spring_security_check?j_username=jasperadmin&j_password=jasperadmin&orgId=null

 

i want to hide username and password from url.

[hozawa]

It's probably because you're using plain text as authentication method. Have you tried using SSO?

http://community.jaspersoft.com/documentation/tibco-jasperreports-server-visualizejs-guide/v610/api-reference-login-and-logout#Login_With_SSO_Token

That said, by looking at codes for hook authentication, it's obvious Visualize.js is passing userid and password in url.

http://community.jaspersoft.com/documentation/tibco-jasperreports-server-visualizejs-guide/v610/api-reference-login-and-logout#Login_With_Hooks

Also, check about using without authentication. If you can authenticate using other apps, you don't need to send userid/password. This may be safer.

http://community.jaspersoft.com/documentation/tibco-jasperreports-server-visualizejs-guide/v610/api-reference-login-and-logout#Using_Visualize.js_Without_Authentication

[kchavda]

Ok i am trying