Hi Nick,
By default, authentication is disabled in EDG Studio. When doing API requests in this mode, a cookie with the user name, e.g., “username=Administrator” should be included with every request.
The EDG Studio documentation doesn’t have anything on configuring authentication. This topic is covered in the docs for the full EDG server product, but not all of that is applicable to Studio.
To enable basic authentication, here is what works for me.
First I create a file called setup.basic-auth.properties in the EDG Studio directory. The file contains:
authMethod=basic
securityRoles=administrator,manager,user,viewer
Now I edit the file conf/users.xml to define my users, passwords, and roles. Note that all users and roles are commented out initially. The <role> elements must match the list of securityRoles defined earlier in the setup file.
Now I launch EDG Studio with the shell command: edg -s setup.basic-auth.properties
EDG should launch with basic authentication enabled. The browser should pop up a dialog asking for username and password. Any of the credentials configured in users.xml should work.
Initially, all roles will get administrator rights. To change that, I log in and go to Server Administration > Rights Management, then select my administrator role, and add AdministratorGroup to it. Then I select ANY_ROLE and remove AdministratorGroup from it. Now, only members of the administrator role will be able to access Server Administration etc.
Now I can use incognito windows to log in as different users.
Hope that helps,
Richard