Latest revision as of 12:52, 11 May 2017

Overview

The SCText servlet allows security strings to be requested by using a text string. It is disabled by default and if required must be explicitly enabled.

Prerequisites

PINsafe 3.x

How to Guide

Enabling SCText

To enable the SCText servlet, edit web.xml on the PINsafe web application (under <Tomcat_root>\pinsafe\WEB-INF). Check if the following lines exists:

   <servlet>
     <servlet-name>SCText</servlet-name>
     <servlet-class>com.swiveltechnologies.pinsafe.server.session.SCText</servlet-class>
   </servlet>

Insert them if they do not, next to the other servlet definitions. The other section will almost certainly be missing:

   <servlet-mapping>
   	<servlet-name>SCText</servlet-name>
   	<url-pattern>/SCText</url-pattern>
   </servlet-mapping>

Insert this section next to the other <servlet-mapping> entries.

Save web.xml and restart Tomcat.

Making SCText requests by username

You should now be able to make requests as follows to receive text security strings:

For a Software install:

http://<pinsafe>:8080/pinsafe/SCText?username=test

For an Appliance

https://<pinsafe>:8080/pinsafe/SCText?username=test

Example output:

1234567890

4507826913

Making SCText requests by SessionID

If "Allow session start by username" is disabled, you need to execute a session start request, retrieve the session ID and use the following format:

For a Software install:

http://<pinsafe>:8080/pinsafe/SCText?sessionid=<sessionid>

For an Appliance

https://<pinsafe>:8080/pinsafe/SCText?sessionid=<sessionid>

Testing

Known Issues

Troubleshooting