SAMP and HTTPS workaround?

Wed Aug 28 14:53:09 CEST 2019

Mark,

I think it highly likely that only I would notice and lament it's passing
in my application (but I can't guarantee it ;-)

Doug

On Tue, Aug 27, 2019 at 1:27 PM Mark Taylor <M.B.Taylor at bristol.ac.uk>
wrote:

> thanks Doug, that's certainly an interesting data point.
> I don't think that kind of usage could be made to work under the
> helper-application model.
>
> On Tue, 27 Aug 2019, Burke, Douglas wrote:
>
> > Mark,
> >
> > I use (well, support) the coord.pointAt.sky mtype (both send and
> receive),
> > and have had thoughts about table.highlight.row/table (although probably
> > firmly in the never-going-to-get-to-it category).
> >
> > Doug
> >
> > On Tue, Aug 27, 2019 at 4:37 AM Mark Taylor <M.B.Taylor at bristol.ac.uk>
> > wrote:
> >
> > > Jean-Michel,
> > >
> > > good to hear that we're looking at similar (possible) solutions.
> > >
> > > I hadn't thought about the possibilities of extending this with
> > > SAMP-specific VOTable content or filename conventions,
> > > it's an interesting thought, though it would require a bit more
> > > standardisation effort.
> > >
> > > Encoding information in the filename or URL is problematic;
> > > by the time the helper application gets to see the file,
> > > it has typically been downloaded to a local temporary file by
> > > the browser, so the filename may not match what was written
> > > in the original HTML.
> > >
> > > One relevant question: what Web SAMP capabilities do
> > > data providers actually want or need that go beyond simply
> > > sending a table/image from a web page to a local application?
> > > I haven't come across these use cases, so if ASOV have
> > > examples I'd be very interested to hear.
> > >
> > > Mark
> > >
> > > On Sat, 24 Aug 2019, Jean-Michel GLORIAN wrote:
> > >
> > > > Hi Mark and the SAMP users,
> > > >
> > > > we had talked about this solution in the ASOV french meeting
> > > > with all the difficulty that you mention.
> > > > Thank you to have implementde a prototype helper application to test
> > > that.
> > > >
> > > >
> > > > If people wants to add SAMP parameters in addition of the file ,
> > > > maybe they could add them on the begin of the name of file
> > > > using a convention and the helper application could parse the name.
> > > > But yes it is quiet limited.
> > > >
> > > > Or maybe we could use a Votable file with a SAMP data model
> > > > with all the addition parameters and a link to the data fits file.
> > > > The link would be static, dynamic and with or not a limited access
> time
> > > >
> > > > JMG
> > > >
> > > > Le 22/08/2019 à 18:10, Mark Taylor a écrit :
> > > > > Hi Doug,
> > > > >
> > > > > thanks for registering an interest.  Any input on the topic
> welcome.
> > > > > I guess the question I'd put related to the approach I'm suggesting
> > > > > here is, how easy/hard would you expect it to be to encourage
> > > > > WWT/CSC users to download and configure or use a helper application
> > > > > along these lines?
> > > > >
> > > > > My only other comment at this stage is it shouldn't make any
> difference
> > > > > whether the URL points at a fixed file or represents a dynamic
> query.
> > > > >
> > > > > Mark
> > > > >
> > > > > On Thu, 22 Aug 2019, Burke, Douglas wrote:
> > > > >
> > > > > > Mark,
> > > > > >
> > > > > > I've been using your WebSAMP JS library [1] with our WWT
> interface
> > > to the
> > > > > > Chandra Source Catalog - http://cxc.harvard.edu/csc2/wwt.html -
> to
> > > send
> > > > > > URLs that return a votable or fits file when retrieved (ie the
> URL is
> > > > > > actually a query and not to a file [2]). We are moving to https
> > > "soon" so
> > > > > > I
> > > > > > am interested in any possible solution (once the WWT client is
> moved
> > > over
> > > > > > to https, that is).
> > > > > >
> > > > > > Ta,
> > > > > > Doug
> > > > > >
> > > > > > [1] so thanks for that
> > > > > > [2] thanks to a confluence of influences that aren't relevant
> here
> > > > > >
> > > > > >
> > > > > > On Thu, Aug 22, 2019 at 9:05 AM Mark Taylor <
> > > M.B.Taylor at bristol.ac.uk>
> > > > > > wrote:
> > > > > >
> > > > > > > Dear SAMP users,
> > > > > > >
> > > > > > > the problem of Web SAMP and HTTPS has been under discussion
> > > > > > > for a while now - basically the Web Profile works fine with
> HTTP
> > > > > > > but won't work from pages served using HTTPS.  A possible
> > > HTTPS-capable
> > > > > > > profile has been prototyped, but it's pretty nasty.  There is
> much
> > > > > > > more information on the topic here:
> > > > > > >
> > > > > > >     http://andromeda.star.bristol.ac.uk/websamp/
> > > > > > >
> > > > > > > As an alternative to the HTTPS profile, I'm thinking about more
> > > > > > > lightweight workarounds.  One is just to provide a simple
> helper
> > > > > > > application that takes a suitable filename on the command line
> > > > > > > (VOTable table or FITS image) and sends it to a running SAMP
> > > > > > > client.  Such an application could be associated in the
> > > > > > > browser with suitable MIME types (application/x-votable+xml,
> > > > > > > image/fits), or you could just choose it when the browser
> > > > > > > asks you what application you want to open a downloaded file
> with.
> > > > > > >
> > > > > > > This is much less flexible than allowing the web page (web
> > > application)
> > > > > > > to interact with the SAMP hub itself, which is what you can do
> > > > > > > with SAMP+Web Profile.  However, in practice, nearly(?) all Web
> > > SAMP
> > > > > > > pages that I'm aware of just use Web SAMP to allow the user to
> > > > > > > send a samp.load.votable or image.load.fits message, and that's
> > > > > > > done nearly as well by the helper application.  It works with
> > > > > > > rather than against normal browser operations, which makes it
> > > > > > > much less painful to implement than the HTTPS profile;
> > > > > > > it works equally with HTTPS or HTTP, and no additional
> > > > > > > infrastructure is required.  The main downside is that the
> user has
> > > > > > > to configure it somehow (install script, tell browser to use it
> > > > > > > to handle relevant files).
> > > > > > >
> > > > > > > I have written such a helper application, and I'd be interested
> > > > > > > to know if anyone wants to try it out: especially data
> providers
> > > > > > > who are using HTTPS and want to allow users to load
> tables/images
> > > > > > > using SAMP.  Would this be an acceptable solution?
> > > > > > >
> > > > > > > You can find the application here:
> > > > > > >
> > > > > > >     http://andromeda.star.bris.ac.uk/websamp/sampload.jar
> > > > > > >
> > > > > > > If you run, e.g. "java -jar sampload.jar /tmp/tmpfile.vot"
> > > > > > > then it will pop up a window asking which VOTable-capable
> > > > > > > SAMP client you want to send tmpfile.vot to.
> > > > > > > (It works out what kind of file it is by looking at the
> content).
> > > > > > >
> > > > > > > Unless your OS/browser can execute jar files directly, to use
> it
> > > with
> > > > > > > a browser you'll need to accompany it with a small shell
> script or
> > > > > > > equivalent like
> > > > > > >
> > > > > > >     #!/bin/sh
> > > > > > >     java -jar /path/to/sampload.jar "$@"
> > > > > > >
> > > > > > > Any feedback, comments, ideas welcome.
> > > > > > >
> > > > > > > Mark
> > > > > > >
> > > > > > > --
> > > > > > > Mark Taylor   Astronomical Programmer   Physics, Bristol
> > > University, UK
> > > > > > > m.b.taylor at bris.ac.uk +44-117-9288776
> > > http://www.star.bris.ac.uk/~mbt/
> > > > > > >
> > > > > --
> > > > > Mark Taylor   Astronomical Programmer   Physics, Bristol
> University, UK
> > > > > m.b.taylor at bris.ac.uk +44-117-9288776
> > > http://www.star.bris.ac.uk/~mbt/
> > > >
> > > >
> > > > --
> > > >
> > > >
> > > > ********************************
> > > > Jean-Michel.Glorian at irap.omp.eu
> > > > Jean-Michel Glorian - Responsable technique OV-GSO - Chef de projet
> > > CASSIS
> > > >
> > > > IRAP - Institut de Recherche en Astrophysique et Planétologie,
> > > > 9, avenue du Colonel Roche, BP 44346,
> > > > 31028 Toulouse cedex 4
> > > > (+33) 5 61 55 77 79
> > > > http://cassis.irap.omp.eu
> > > >
> > > > IRAP, Université de Toulouse, CNRS, CNES, UPS, (Toulouse), France
> > > > ********************************
> > > >
> > > >
> > >
> > > --
> > > Mark Taylor   Astronomical Programmer   Physics, Bristol University, UK
> > > m.b.taylor at bris.ac.uk +44-117-9288776
> http://www.star.bris.ac.uk/~mbt/
> >
>
> --
> Mark Taylor   Astronomical Programmer   Physics, Bristol University, UK
> m.b.taylor at bris.ac.uk +44-117-9288776  http://www.star.bris.ac.uk/~mbt/
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mail.ivoa.net/pipermail/apps/attachments/20190828/b5a4eab9/attachment.html>