DataV:Publish PC-side visualization applications

Password authentication

1. In the Publish dialog box, turn on Password.

2. In the Access Password field, enter your password.

   The password must be 6 or more characters in length and must meet the following three requirements:

   • It must contain at least one capital letter A to Z.

   • The name must contain at least one lowercase letter a to z.

   • Contains at least one digit from 0 to 9.

   After the password is set, the system prompts Access Restrictions Set.

3. Optional: Validation period.

   Important

   You can configure the Validity Period parameter only after the password is set or token authentication is enabled.

   • Select Validity Period to specify the validity period of the password. The maximum validity period is 32 hours. After the visitor enters the password for the first time and successfully accesses the visualization application, the visitor can access the visualization application without entering the password within the specified validity period.

   • If you remove the Validity Period check box, you must enter a password for each access.

   After the password is set, when you access the sharing link of the visualization application again, the system prompts you to enter the password.

Use Token Verification

You can use token authentication to integrate the access permissions of a visualization application with your permission system.

In the Publish dialog box, turn on Pass Token Verification to enable token verification. After token verification is enabled, you can perform the following operations:

• Obtain a token verification code.

  If you turn on Pass Token Verification, DataV generates a token. You must record the token for later use.

• Optional. Configure Validation Period.

  • If you select Validity Period, you can set the validity period to 32 hours. After a visitor performs token verification for the first time and successfully accesses the visualization application, the visitor can access the visualization application without the need for further verification within the specified validity period.

  • Select Validity Period. Each access request must pass the verification.

After token verification is enabled, open the sharing page of the visualization application again, and you will receive an Access Denied message indicating that your access is denied. If you want to open your page, you need to complete the following steps.

1. Publish the visualization application and record the encoding of the visualization application (the last segment of the URL).

2. Connect the code to the current time in milliseconds, separated by a | (vertical bar).

3. Use the token through HMAC-SHA256 base64 to encrypt the token verification code obtained in the previous step.

4. The time and the encrypted signature are respectively named _datav_time and _datav_signature.

5. Put them in turn into URL querystring.

   Important

   If you need to use GET to pass parameters in the URL of your visualization application, we recommend that you use the token parameter provided by DataV to verify the signature for security purposes. For more information, see Verify the signature of the token parameter on the DataV sharing page.

   The following code provides an example on how to call Java API operations for LindormTable SQL to access Lindorm wide tables:

   • PHP:

     <?php
       $token = "kBwoX9rFX9v4zbOT0Gjd_wr65DZ****";
       $screenID = "03d1b68faeb09671046d1ef43f58****";
       $time = time()*1000;
       $stringToSign = $screenID.'|'.$time;
       $signature = urlencode(base64_encode(hash_hmac('sha256', $stringToSign, $token, true)));
       $url = "http://datav.aliyuncs.com/share/".$screenID."?_datav_time=".$time."&_datav_signature=".$signature;
     ?>
     <iframe width=100% height=100% src="<?=$url?>"/>

   • Node.js:

     const crypto = require('crypto');
     var token = "Ev97wOUSAtJusc3Vsd9O2ngr_vfV****";
     var screenID ="14c5448c00ecde02b065c231d165****";
     var time = Date.now();
     var stringToSign = screenID +'|'+ time;
     var signature = crypto.createHmac('sha256', token).update(stringToSign).digest().toString('base64');
     var url="http://datav.aliyuncs.com/share/"+ screenID +"?_datav_time="+time+"&_datav_signature="+ encodeURIComponent(signature);

   • Java:

     package com.company;
     import java.security.*;
     import java.util.Date;
     import javax.crypto.*;
     import javax.crypto.spec.SecretKeySpec;
     import org.apache.commons.codec.binary.Base64;
     import java.net.URLEncoder;
     public class TokenTest {
         public static String getSignedUrl(String screenID, String token){
             Date date = new Date();
             Long time = date.getTime();
             String stringToSign = screenID + "|" + time;
             String signature = HMACSHA256(stringToSign.getBytes(), token.getBytes());
             String url = "http://datav.aliyuncs.com/share/"+ screenID +"?_datav_time="+time+"&_datav_signature="+ signature;
             return url;
         }
         /**
          * Use the Java native digest to implement SHA256 encryption. 
          * @param str The encrypted packet. 
          * @return
          */
         public static String HMACSHA256(byte[] data, byte[] key)
         {
             try  {
                 SecretKeySpec signingKey = new SecretKeySpec(key, "HmacSHA256");
                 Mac mac = Mac.getInstance("HmacSHA256");
                 mac.init(signingKey);
                 return URLEncoder.encode(byte2Base64(mac.doFinal(data)));
             } catch (NoSuchAlgorithmException e) {
                 e.printStackTrace();
             } catch (InvalidKeyException e) {
                 e.printStackTrace();
             }
             return null;
         }
         private static String byte2Base64(byte[] bytes){
             return Base64.encodeBase64String(bytes);
         }
         public static void main(String[] args) throws Exception {
             System.out.println(getSignedUrl("screenId", "token"));
         }
     }

   • C#:

     using System;
     using System.Security.Cryptography;
     using System.Text.RegularExpressions;
     using System.Collections.Generic;
     using System.Linq;
     using System.Web;
     using System.Text;
     
     namespace datavToken
     {
         class Program
         {
             static void Main(string[] args)
             {
                 var dic=new Dictionary<string, string>(); // Custom parameters. 
                 dic.Add("datav_sign_no", "123998"); // The name must start with datav_sign_. A signature is required. 
                 dic.Add("datav_sign_lo", "kk");
                 dic.Add("datav_sign_ao", "xx");
     
                 dic.Add("name", "123"); // No signature is required. 
                 // The prefix of the shared page, the ID and token of the shared screen, and the custom parameter dictionary. 
                 Console.WriteLine(GenerateUrl("https://datav.aliyun.com/share/", "ca74bea5e45503070d607795e0****", "66DsL2qjrXRHluSJScv_flOUhn****", dic));
             }
             private static string GenerateUrl(string datavBase, string screenId, string token, Dictionary<string, string> customeParams)
             {
                 string pattern = @"^datav_sign_.*";
                 string timestamp = GetTimeStamp();
     
                 // Sort the parameters. 
                 Dictionary<string, string>.KeyCollection keyCol = customeParams.Keys;
                 List<string> signKeys = new List<string>();
     
                 foreach (var item in keyCol.ToList())
                 {
                     if (Regex.IsMatch(item, pattern))
                     {
                         signKeys.Add(item);
                     }
                 }
     
                 // Sort by key. 
                 signKeys = signKeys.OrderBy(k => k).ToList();
     
                 string paramsSignStr = signKeys.Aggregate("", (total, key) =>
                 {
                     if (total != "")
                     {
                         total += "&";
                     }
                     total += key + "=" + customeParams[key];
                     return total;
                 });
                 // No parameter authentication exists.
                 string signStr = screenId + "|" + timestamp;
                 // Parameter authentication exists.
                 //string signStr = screenId + "|" + timestamp + "|" + paramsSignStr;
                 
     
                 var encoding = new System.Text.ASCIIEncoding();
                 byte[] keyByte = encoding.GetBytes(token);
                 byte[] messageBytes = encoding.GetBytes(signStr);
                 string signature;
                 using (var hmacsha256 = new HMACSHA256(keyByte))
                 {
                     byte[] hashmessage = hmacsha256.ComputeHash(messageBytes);
                     signature = Convert.ToBase64String(hashmessage);
                 }
     
     
                 var paramDic = new Dictionary<string, string>();
                 paramDic.Add("_datav_time", timestamp);
                 paramDic.Add("_datav_signature", signature);
     
                 foreach (var item in customeParams)
                 {
                     paramDic.Add(item.Key, item.Value);
                 }
                 return datavBase + screenId + "?" + ParseToString(paramDic);
             }
             public static string GetTimeStamp()
             {
                 TimeSpan ts = DateTime.UtcNow - new DateTime(1970, 1, 1, 0, 0, 0, 0);
                 return Convert.ToInt64(ts.TotalMilliseconds).ToString();
             }
             static public string ParseToString(IDictionary<string, string> parameters)
             {
                 IDictionary<string, string> sortedParams = new SortedDictionary<string, string>(parameters);
                 IEnumerator<KeyValuePair<string, string>> dem = sortedParams.GetEnumerator();
     
                 StringBuilder query = new StringBuilder("");
                 while (dem.MoveNext())
                 {
                     string key = dem.Current.Key;
                     string value = dem.Current.Value;
                     if (!string.IsNullOrEmpty(key) && !string.IsNullOrEmpty(value))
                     {
                         query.Append(key).Append("=").Append(HttpUtility.UrlEncode(value)).Append("&");
                     }
                 }
                 string content = query.ToString().Substring(0, query.Length - 1);
     
                 return content;
             }
         }
     }

IP address whitelist access

After you enable an IP address whitelist, the published visualized application can be accessed only from the IP addresses in the whitelist.

1. In the Publish dialog box, turn on IP Whitelist.

2. In the IP Whitelist field, enter your IP address and separate the whitelists with commas (,).

   After the IP address whitelist is configured, when you access the shared link of the visualization application again, if you use an IP address that is not in the whitelist to access the current visualization application, access to the visualization application page will be denied.