NetTalk Central

Recent Posts

Pages: 1 2 3 [4] 5 6 ... 10
31
Web Server - Ask For Help / Google picking up documents from web folder
« Last post by rupertvz on November 08, 2024, 12:24:09 AM »
Hi Guys,

We have a NT web server with SSL, site security, and users must be logged on to access the web server.
Google somehow managed to access documents from the "web" folder, and published links to these online.

Is there a way to block / stop this, as it is a serious security concern for the customer.
32
Hi,

I am looking to embed A NTWS page on an external website, in this case a WIX hosted site.

And with some help from my ChatGPT, it seems I need to set a CSP on the NTWS, to allow this.

The X-Frame is currently set to "sameorigin" but in order to allow this and the external website as well,
I need to add the external URL and this needs to be done via a CSP.

How and where to set in NTWS?

thanks

Johan






33
Mike,
Templates have a LOT in them.  A lot of things are not what they seem to be.  You just have to ask questions and experiment! Incredible stuff is doable with NT and even more with NT and css.  I try to do as much in NT as I can.  My custom.css is very tiny.
Ron
34
Thank you very much for this rjolda.
I am new to Nettalk14 and need to look at all the new options on the templates.
35
Wise, no prompt and using the comment.
36
i Mike,
I am doing that with native NT.  Initially, I had a consultant help me and he did it in css by working around the NT css as custom css.  That was somewhat fragile so I deleted the custom CSS and did this in NT alone:
Checkbox  at left.   Description at right.  Now, I don't have to fudge css every time I want to play with it.
I have attached some screen pics to help explain.
Ron
 
37
Web Server - Ask For Help / Default Security
« Last post by Niels Larsen on November 06, 2024, 03:25:52 AM »
The following setup does not work - for me...

I have set the "User must be locked in" on the webserver template. On the form "User must be locked in" is set to default.
If i try to open the form nothing happens. If I change "User must be locked in" on the form to yes it all works.
Maybe a template error or?

Attached an example. After login try to click the test menu.

/Niels
38
Web Server - Ask For Help / Re: JWT Json Web Token
« Last post by PaulMacFarlane on November 05, 2024, 02:44:46 PM »
Okay - I think I figured out the problem.

The alg is not correct.  If I switch to HS256 all works.

The website is expecting RS256.

So I suspect this means I cannot use the HMAC function since that creates HS256....

39
I want to do it on a netwebform.
The form contains many fields some with long questions with a checkbox reply.
The default behaviour on a form is that all fields prompts and value and comments are aligned
So a form with a long question makes all the fields values move far right
I am happy to accomplish it in nettalk or using css
help me understand what options I have ?
 
40
Web Server - Ask For Help / Re: JWT Json Web Token
« Last post by PaulMacFarlane on November 04, 2024, 04:11:51 PM »
I am successfully generating the JWT, but when I verify it on jwt.io it's telling me my secret is bad....

The header and payload data is decoded fine but I'm doing something wrong on the 'secret' stuff....

Here's the code I'm using:

Code: [Select]
!Create_ClientJWT       FUNCTION (STRING KeyID,STRING ClientID, string UserID, string lSecret) ! Declare Procedure


! Build Header
    Header_element.kid = clip(KeyID)
    Header_element.alg = 'RSA256'

    jwtj.Start()
    jwtj.SetTagCase(jf:CaseAsIs)
    jwtj.Save(header_element,stHeader)

! Payload

    Payload_element.iss =   clip(ClientID)      ! Issuer
    Payload_element.sub =   clip(UserID)        ! Subject of token
    Payload_element.aud =   'https://api.alt.www4.irs.gov/auth/oauth/v2/token'
    Payload_element.iat =   fmt.ClarionToUnixDate(today(),clock())  ! Issued At Time - Epoch time
    Payload_element.exp =   fmt.ClarionToUnixDate(today(),clock()+(15*60*100))  ! expire time = iat + 15 minutes
    stPayload.SetValue('')
    stPayload.MakeGUID4(st:format)
    Payload_element.jti =   stPayload.GetValue()  ! Unique ID I create

    jwtj.Save(Payload_element,stPayload)

!    message(stHeader.GetValue(),'stheader:')
!    message(stPayload.GetValue(),'stPayload:')

    stHeader.Base64Encode(st:URLSafe + st:NoPadding)
    stPayload.Base64Encode(st:URLSafe + st:NoPadding)

! The call in this format gives me an invalid type error..
!  stToEncrypt.SetValue(stHeader.GetValue()&'.'&stPayload.GetValue())
!  stToEncrypt.SetValue(NetMakeHMAC(stToEncrypt.GetValue(),stToEncrypt.Len,CLIP(lSecret),net:CALG_SHA_256))

! So I do this....  stPreEncrypt        string(1024)


    stPreEncrypt = clip(stHeader.GetValue())&'.'& clip(stPayload.GetValue())        ! Values already encoded

    stToEncrypt.SetValue(NetMakeHMAC(stPreEncrypt,len(stPreEncrypt),CLIP(lSecret),net:CALG_SHA_256))

    stToEncrypt.Base64Encode(st:URLSafe + st:NoPadding)

  RETURN stHeader.GetValue()&'.'& stPayload.GetValue() &'.'& stToEncrypt.GetValue()

Any ideas?
Pages: 1 2 3 [4] 5 6 ... 10