worklight-adapters

Unauthorized WL.Client.invokeProcedure call

亡梦爱人 提交于 2019-12-25 17:18:36
问题 WL.Client.InvokeProcedure is an internal API and used by Worklight Framework, however, you can call this API after connecting a device in Debug mode with Google Chrome. How can we restrict the access to WL.Client.invokeProcedure so that a user is not able to Exploit this call? Steps to replicate (for Exploitation Only): 1. unpack an APK built by Worklight 2. Set the android:debuggable=true (also check how WL Adapters are being called in JS files) 3. Rebuild the APK 4. Install the APK in

Unauthorized WL.Client.invokeProcedure call

非 Y 不嫁゛ 提交于 2019-12-25 17:18:04
问题 WL.Client.InvokeProcedure is an internal API and used by Worklight Framework, however, you can call this API after connecting a device in Debug mode with Google Chrome. How can we restrict the access to WL.Client.invokeProcedure so that a user is not able to Exploit this call? Steps to replicate (for Exploitation Only): 1. unpack an APK built by Worklight 2. Set the android:debuggable=true (also check how WL Adapters are being called in JS files) 3. Rebuild the APK 4. Install the APK in

Worklight Adapter to connect to Advantage Database

让人想犯罪 __ 提交于 2019-12-25 17:05:28
问题 I need to connect to the Advantage Database through worklight Adapter. I added the adsjdbc.jar(8.1), and added the datasource definition in *SQLadapter.xml file <dataSourceDefinition> <driverClass>com.extendedsystems.jdbc.advantage.ADSDriver</driverClass> <url>jdbc:extendedsystems:advantage://ipaddress:port/wxzy$/TP8/COMPANY/ABCDMAIN/ABCDMAIN.add;</url> <user>xyz</user> <password>12345</password> </dataSourceDefinition> When I try to Invoke the procedure, It throws { "errors": [ "Runtime: org

IBM Worklight - How to parse adapter response?

帅比萌擦擦* 提交于 2019-12-25 05:06:26
问题 This is my stored procedure: CREATE PROCEDURE PROC() BEGIN SELECT * FROM TABLENAME; END// This is my unction to call stored procedure using SQL adapter: function callStored() { return WL.Server.invokeSQLStoredProcedure({ procedure : "proc", parameters : [] }); } This is the invocationResult: { "isSuccessful": true, "resultSet": [ { "name": "a", "pass": "123", "time_stamp": "2014-04-07T10:13:17.000Z" }, { "name": "chetan", "pass": "123456", "time_stamp": "2014-04-07T10:13:34.000Z" }, { "name":

Worklight adapter calls are not encrypted (WL.Client.invokeProcedure)

爱⌒轻易说出口 提交于 2019-12-25 03:28:08
问题 I'm using Worklight adapters to fetch data from a webservice. From client side I'm doing WL.Client.invokeProcedure Server side has respective code. Issue is this client to server adapter communication is via plain text and can easily be sniffed. Though my url is HTTPS but is of no use. Please help, I'm sure there should be a way in IBM worklight to make a secure application. Thanks 回答1: AFAIK worklight is providing only two options for security between your mobile app and wroklight server. As

IBM Worklight - Using SQLite in Android?

梦想的初衷 提交于 2019-12-24 22:32:17
问题 I am learning IBM Worklight. I have implemented an SQLAdapter with DB2 as my database on my laptop. But I could not find any tutorial regarding "How Connect SQLAdapter with SQLite " in Android emulator. Any help will be appreciated. 回答1: That's because you do not use Worklight adapters in conjunction with SQLite. Worklight adapters are a means to deliver data from and to an external backend system (like your DB2 database). In order to interface with SQLite in your device you use straight

Error when using Parameters in Worklight HTTP Adapter

纵饮孤独 提交于 2019-12-24 18:07:59
问题 Using Worklight 6.2.0.0. I'm trying to consume one of our corporate web services via Worklight's HTTP Adapter. I have the WSDL for the web service, and I used the "Discover Backend Services" tool to generate the adapter JavaScript and XML. The web service has 2 input parameters and 3 output parameters, all strings. When I come to invoke the procedure on the client, I'm doing this: var invocationData = { adapter : 'messageHandlerAdapter', procedure : 'messageHandlerService_messageHandler',

Worklight Adapter Override Origin of request

不打扰是莪最后的温柔 提交于 2019-12-24 13:32:08
问题 Worklight 6.1 Using Chrome to test backend access API's and in one scenario the ability to override the Origin is needed to successfully issue the request and avoid a status 403. Implementing the same API in a Worklight http adapter I would like to override the Origin to avoid hitting a 403. It is possible to override the Origin in a worklight http adapter. Thanks for your time and help 回答1: Did not try this myself as I don't have an application doing what that yours is doing, but you can add

How to use the PATCH method in HTTP adapters?

大憨熊 提交于 2019-12-24 13:31:10
问题 Can any please help me about how to make HTTP call using the PATCH method in an HTTP Adapter in IBM Worklight? 回答1: The PATCH method is not supported. Per the HTTP adapter documentation: You can use the HTTP adapter to send GET , POST , PUT , and DELETE HTTP requests and retrieve data from the response body. Data in the response can arrive in XML , HTML , or JSON formats. You can submit feature requests via: http://www.ibm.com/developerworks/rfe/ 来源: https://stackoverflow.com/questions

Class Cast: java.lang.String cannot be cast to org.mozilla.javascript.Scriptable

ぃ、小莉子 提交于 2019-12-24 12:43:35
问题 While invoking a http adapter procedure, it popsup a dialog with ProcedureName, Signature and Paramaters and when I hit Run button after entering two string type parameters, I am getting "Class Cast: java.lang.String cannot be cast to org.mozilla.javascript.Scriptable" error. FYI, I created a worklight adapter using worklight application framework data object editor(automatically generates .xml and impl.js files) impl.js file function CurrencyConvertor_ConversionRate(params, headers){ var