DataV:Create, preview, and publish visualization applications

Password

1. In the Publish dialog box, enable Password.

2. In the Password input box, enter your verification password.

   The password must be at least 6 characters long and meet all three of the following conditions:

   • Include at least one uppercase letter A-Z.

   • Include at least one lowercase letter a-z.

   • Include at least one number 0-9.

   After the password is set successfully, the system will display Access control is configured.

3. Optional: Configure Verification Validity Period.

   Important

   You can only configure the Verification Validity Period after successfully setting a password or enabling Token verification.

   • Select Verification Validity Period to set the validity period for the password, up to a maximum of 32 hours. After a visitor enters the password correctly and successfully accesses the visualization application for the first time, they can access the visualization application without entering the password again within the set validity period.

   • Deselect Verification Validity Period to require password entry for each access.

   After the password is set successfully, visitors will need to enter the password to access the shared link.

Token

You can integrate the access permissions of visualization applications with your permission system through Token verification.

In the Publish dialog box, enable the Token switch to enable Token verification. After Token verification is enabled, you can perform the following operations:

• Obtain the Token verification code.

  After enabling the Token switch, DataV will generate a Token. You need to record this Token for later use.

• (Optional) Configure Verification Validity Period.

  • Select Verification Validity Period to customize the validity period for Token verification, up to a maximum of 32 hours. After a visitor completes Token verification and successfully accesses the visualization application for the first time, they can access the visualization application without verification again within the set validity period.

  • Deselect Verification Validity Period to require verification for each access.

After Token verification is enabled, when you open the sharing page of the visualization application again, you will receive an Access Denied message, indicating that your access has been denied. To open your page, you need to complete the following steps.

1. Publish the visualization application and record the visualization application code (the last segment of the URL).

2. Connect the code with the current time (in milliseconds), separated by a | (VERTICAL LINE).

3. Use the Token with HMAC-SHA256 base64 to encrypt the Token verification code obtained in the previous step.

4. Name the time and encrypted signature as _datav_time and _datav_signature respectively.

5. Place them in the querystring of the URL in sequence.

   Important

   If you need to pass parameters using the GET method in your visualization application URL, for security reasons, we recommend using the Token parameter signature verification provided by DataV. For more information, see DataV sharing page Token parameter signature verification.

   The following sample code provides examples:

   • PHP:

     <?php
       $token = "kBwoX9rFX9v4zbOT0Gjd_wr65DZ****";
       $screenID = "03d1b68faeb09671046d1ef43f58****";
       $time = time()*1000;
       $stringToSign = $screenID.'|'.$time;
       $signature = urlencode(base64_encode(hash_hmac('sha256', $stringToSign, $token, true)));
       $url = "http://datav.aliyuncs.com/share/".$screenID."?_datav_time=".$time."&_datav_signature=".$signature;
     ?>
     <iframe width=100% height=100% src="<?=$url?>"/>

   • Node.js:

     const crypto = require('crypto');
     var token = "Ev97wOUSAtJusc3Vsd9O2ngr_vfV****";
     var screenID ="14c5448c00ecde02b065c231d165****";
     var time = Date.now();
     var stringToSign = screenID +'|'+ time;
     var signature = crypto.createHmac('sha256', token).update(stringToSign).digest().toString('base64');
     var url="http://datav.aliyuncs.com/share/"+ screenID +"?_datav_time="+time+"&_datav_signature="+ encodeURIComponent(signature);

   • Java:

     package com.company;
     import java.security.*;
     import java.util.Date;
     import javax.crypto.*;
     import javax.crypto.spec.SecretKeySpec;
     import org.apache.commons.codec.binary.Base64;
     import java.net.URLEncoder;
     public class TokenTest {
         public static String getSignedUrl(String screenID, String token){
             Date date = new Date();
             Long time = date.getTime();
             String stringToSign = screenID + "|" + time;
             String signature = HMACSHA256(stringToSign.getBytes(), token.getBytes());
             String url = "http://datav.aliyuncs.com/share/"+ screenID +"?_datav_time="+time+"&_datav_signature="+ signature;
             return url;
         }
         /**
          *  Use Java's native digest implementation for SHA256 encryption.
          * @param str The encrypted message.
          * @return
          */
         public static String HMACSHA256(byte[] data, byte[] key)
         {
             try  {
                 SecretKeySpec signingKey = new SecretKeySpec(key, "HmacSHA256");
                 Mac mac = Mac.getInstance("HmacSHA256");
                 mac.init(signingKey);
                 return URLEncoder.encode(byte2Base64(mac.doFinal(data)));
             } catch (NoSuchAlgorithmException e) {
                 e.printStackTrace();
             } catch (InvalidKeyException e) {
                 e.printStackTrace();
             }
             return null;
         }
         private static String byte2Base64(byte[] bytes){
             return Base64.encodeBase64String(bytes);
         }
         public static void main(String[] args) throws Exception {
             System.out.println(getSignedUrl("screenId", "token"));
         }
     }

   • C#:

     using System;
     using System.Security.Cryptography;
     using System.Text.RegularExpressions;
     using System.Collections.Generic;
     using System.Linq;
     using System.Web;
     using System.Text;
     
     namespace datavToken
     {
         class Program
         {
             static void Main(string[] args)
             {
                 var dic = new Dictionary<string, string>();  // Custom parameters.
                 dic.Add("datav_sign_no", "123998");         // datav_sign_ prefix, needs to be signed.
                 dic.Add("datav_sign_lo", "kk");
                 dic.Add("datav_sign_ao", "xx");
     
                 dic.Add("name", "123");   // Does not need to be signed.
                 // Share page prefix, screen share ID, token, custom parameter dictionary.
                 Console.WriteLine(GenerateUrl("https://datav.aliyun.com/share/", "ca74bea5e45503070d607795e0****", "66DsL2qjrXRHluSJScv_flOUhn****", dic));
             }
             private static string GenerateUrl(string datavBase, string screenId, string token, Dictionary<string, string> customeParams)
             {
                 string pattern = @"^datav_sign_.*";
                 string timestamp = GetTimeStamp();
     
                 // Parameter sorting.
                 Dictionary<string, string>.KeyCollection keyCol = customeParams.Keys;
                 List<string> signKeys = new List<string>();
     
                 foreach (var item in keyCol.ToList())
                 {
                     if (Regex.IsMatch(item, pattern))
                     {
                         signKeys.Add(item);
                     }
                 }
     
                 // Sort by key.
                 signKeys = signKeys.OrderBy(k => k).ToList();
     
                 string paramsSignStr = signKeys.Aggregate("", (total, key) =>
                 {
                     if (total != "")
                     {
                         total += "&";
                     }
                     total += key + "=" + customeParams[key];
                     return total;
                 });
                 //No parameter authentication
                 string signStr = screenId + "|" + timestamp;
                 //Parameter authentication exists
                 //string signStr = screenId + "|" + timestamp + "|" + paramsSignStr;
                 
     
                 var encoding = new System.Text.ASCIIEncoding();
                 byte[] keyByte = encoding.GetBytes(token);
                 byte[] messageBytes = encoding.GetBytes(signStr);
                 string signature;
                 using (var hmacsha256 = new HMACSHA256(keyByte))
                 {
                     byte[] hashmessage = hmacsha256.ComputeHash(messageBytes);
                     signature = Convert.ToBase64String(hashmessage);
                 }
     
     
                 var paramDic = new Dictionary<string, string>();
                 paramDic.Add("_datav_time", timestamp);
                 paramDic.Add("_datav_signature", signature);
     
                 foreach (var item in customeParams)
                 {
                     paramDic.Add(item.Key, item.Value);
                 }
                 return datavBase + screenId + "?" + ParseToString(paramDic);
             }
             public static string GetTimeStamp()
             {
                 TimeSpan ts = DateTime.UtcNow - new DateTime(1970, 1, 1, 0, 0, 0, 0);
                 return Convert.ToInt64(ts.TotalMilliseconds).ToString();
             }
             static public string ParseToString(IDictionary<string, string> parameters)
             {
                 IDictionary<string, string> sortedParams = new SortedDictionary<string, string>(parameters);
                 IEnumerator<KeyValuePair<string, string>> dem = sortedParams.GetEnumerator();
     
                 StringBuilder query = new StringBuilder("");
                 while (dem.MoveNext())
                 {
                     string key = dem.Current.Key;
                     string value = dem.Current.Value;
                     if (!string.IsNullOrEmpty(key) && !string.IsNullOrEmpty(value))
                     {
                         query.Append(key).Append("=").Append(HttpUtility.UrlEncode(value)).Append("&");
                     }
                 }
                 string content = query.ToString().Substring(0, query.Length - 1);
     
                 return content;
             }
         }
     }

IP Address Whitelist

After enabling the IP whitelist, the published visualization application can only be accessed from IP addresses within the specified whitelist range.

1. In the Publish dialog box, enable IP Whitelist.

2. In the IP Address Whitelist input box below, enter your IP addresses, separating different whitelist entries with commas.

   After the IP whitelist is set successfully, when you access the visualization application's sharing link again using a non-whitelisted IP, access to the visualization application page will be denied.