且构网

分享程序员开发的那些事...
且构网 - 分享程序员编程开发的那些事

IBM Worklight-如何在Worklight Console中启用应用程序真实性?

更新时间:2022-12-22 10:44:19

如果您提到您实际上已经做过的事情,那将会更有帮助,因为配置authenticationConfig.xml只是第一步.

It would be more helpful if you would mention what you've actually done, because configuring authenticationConfig.xml is only 1 step of several.

还请注意,要使App Authenticity能够真正工作并且不使用虚拟实施,您必须使用 IBM Worklight的消费者版(即,成为付费客户并安装正确版本的Worklight Studio和Worklight Server).

Also note that for App Authenticity to really work and not use dummy implementation, you must use the Consumer edition of IBM Worklight (i.e., be a paying customer and install the correct version of Worklight Studio and Worklight Server).


我相信对于您的问题,您尚未完成下面的第2步.


启用应用程序真实性的步骤:

  1. 配置具有wl_authenticityRealm领域的安全测试:

<customSecurityTest name="customTests">
     <test realm="wl_antiXSRFRealm" step="1"/>
     <test realm="wl_authenticityRealm" step="1"/>
     <test realm="wl_remoteDisableRealm" step="1"/>
     <test realm="wl_anonymousUserRealm" isInternalUserID="true" step="1"/>
     <test realm="wl_deviceNoProvisioningRealm" isInternalDeviceID="true" step="2"/>
</customSecurityTest>

^幻灯片9中提到了

将此securityTest放在application-descriptor.xml中的环境上,例如:

Place this securityTest on the environment(s) in application-descriptor.xml, for example:

<android version="1.0" securityTest="customTests">

  • 对于Android,生成公共签名密钥:

  • For Android, generate the public signing key:

    <android version="1.0" securityTest="customTests">
            <worklightSettings include="true"/>
            <security>
                <encryptWebResources enabled="false"/>
                <testWebResourcesChecksum enabled="false" ignoreFileExtensions="png, jpg, jpeg, gif, mp4, mp3"/>
                <publicSigningKey>MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBdfdsfdsfiQKBgQCPCbaCfAfnAqQ12/S5LLfA4cBz/3INyLRPhFGSVFztdWNzPhrna1xDc8/3V1sUIW2odfdfddfdfffdR2n3dAnNMVydfdfdfv68gmU5qVCN4LxSKKRAj7VVbhBxBIEt5MbY+c0o7NZ2Pgu/moJee8Wgu8veZ1TJntYn+cWCYuI/JSnA9nsskwhSdPHK32edsfsdfdfQIDAQAB</publicSigningKey>
            </security>
        </android>
    

    ^幻灯片10-13中提到了

    ^ This is mentioned in slides 10-13

    对于iOS,放置应用程序bundleId:

    For iOS, place the app bundleId:

    <iphone bundleId="com.worklight.test" version="1.0" securityTest="customTests">

    ^幻灯片10-13中提到了

    ^ This is mentioned in slides 10-13

    现在应该在Worklight Console中为您启用应用程序真实性"下拉列表.

    Now the App Authenticity dropdown should be enabled for you in Worklight Console.