javascript - Cross-domain ajax requests with mutual authentication -


my scenario kinda easy explain: need call 3rd party services (e-gov) accessible through mutual authentication, don't have certificate. platform user 1 owns it. have installed in browser, 1 way or another.

it easy (although insecure) if user upload certificate our server, not option. each user must use own certificate, things harder.

so, idea came mind and, before digging further (build testing servers/certificates/etc), i'd know if it's possible, @ least in theory.

would feasible send soap request payload user's browser, build , execute requests "client-side", making use of browser's installed certificates, , forward service reply server? or i'd blocked cross-site request forgery or alike?


Comments

Popular posts from this blog

shopping cart - Page redirect not working PHP -

php - How to modify a menu to show sub-menus -

python - Installing PyDev in eclipse is failed -