SAP HANA Developer Guide - Get a Free Blog

}
The exposed keyword enables you define if content in a package (and its subpackages) is to be made available by
HTTP to client requests. Values are Boolean true or false. If no value is set for exposed, the default setting (false)
applies.
authentication
}
{
"authentication" :
[
{
"method": "LogonTicket",
},
{
"method" : "Basic",
},
{
"method": "Form",
}
],
The authentication keyword enables you to define the authentication method to use for Browser requests either
at the application level or for single packages in an application. SAP HANA Extended Application Services support
the following logon authentication mechanisms:
Note: You can specify multiple authentication methods in the application-access file.
● Basic authentication
Logon with a recognized database user name and password.
● SAP logon ticket
SAP logon tickets enable single sign-on across SAP boundaries; SAP logon tickets can be also be used as
authentication for access to third-party applications.
● Form-based authentication
Redirect the logon request to a form to fill in, for example, a Web page.
If you use the authentication in the .xsaccess file, you must specify the authentication method to apply, for
example, basic or SAP logon ticket. If you use the authentication keyword in the application-access file, but do not
set an authentication method, your .xsaccess file is a valid JSON file but is not a semantically valid .xsaccess
file and will return a parsing validation error . If you do not set the authentication keyword, your application applies
the default basic authentication method (user name and password) to enable access to data.
54
P U B L I C
© 2012 SAP AG. All rights reserved.
SAP HANA Developer Guide
Setting Up Your Application