# Message Box from passenger app

**URL:** <https://discourse.openondemand.org/t/message-box-from-passenger-app/3531>\
**Category:** Get Help\
**Created:** [May 31, 2024, 5:53pm UTC](https://discourse.openondemand.org/t/message-box-from-passenger-app/3531 "2024-05-31T17:53:56Z")\
**Posts on this page:** 5\
**Page:** 1

<div class="post-metadata">

**Author:** ![fangpingmu](https://sea1.discourse-cdn.com/flex015/user_avatar/discourse.openondemand.org/fangpingmu/32/532_2.png) [@fangpingmu](https://discourse.openondemand.org/u/fangpingmu)\
**Post date:** [May 31, 2024, 5:53pm UTC](https://discourse.openondemand.org/t/message-box-from-passenger-app/3531/1 "2024-05-31T17:53:56Z")

</div>

I have developed a passenger app. This app has called an internal function. For security reasons, we have changed the internal function to prompt for password. Is it possible to show a message box from a passenger app so that the user can enter password?

---

<div class="post-metadata">

**Author:** ![jeff.ohrstrom](https://sea1.discourse-cdn.com/flex015/user_avatar/discourse.openondemand.org/jeff.ohrstrom/32/136_2.png) [@jeff.ohrstrom](https://discourse.openondemand.org/u/jeff.ohrstrom)\
**Post date:** [May 31, 2024, 6:02pm UTC](https://discourse.openondemand.org/t/message-box-from-passenger-app/3531/2 "2024-05-31T18:02:38Z")

</div>

Didn’t they have to login through your apache? I mean apache already provides authentication.

If you want to limit the users who can use the app, just `chmod` and `chown` the files in the directory `/var/www/ood/apps/sys/<my app>`. If you `chmod 750` then `chown -R root:staff` only users in the `staff` unix group will be able to use the app after they’ve already authenticated through apache.

---

<div class="post-metadata">

**Author:** ![fangpingmu](https://sea1.discourse-cdn.com/flex015/user_avatar/discourse.openondemand.org/fangpingmu/32/532_2.png) [@fangpingmu](https://discourse.openondemand.org/u/fangpingmu)\
**Post date:** [May 31, 2024, 8:00pm UTC](https://discourse.openondemand.org/t/message-box-from-passenger-app/3531/3 "2024-05-31T20:00:11Z")

</div>

The same script will be used in a web application, in which no authentication is required. Thus, there is an authentication step.

When I used this script through Open Ondemand passenger app, this generates an extra step to re-authenticate the user. Does Open Ondemand cache the password in an environmental variable? If so, I can use the variable to call the script. Otherwise, Is it possible to show a message box from a passenger app so that the user can enter password again?

---

<div class="post-metadata">

**Author:** ![jeff.ohrstrom](https://sea1.discourse-cdn.com/flex015/user_avatar/discourse.openondemand.org/jeff.ohrstrom/32/136_2.png) [@jeff.ohrstrom](https://discourse.openondemand.org/u/jeff.ohrstrom)\
**Post date:** [May 31, 2024, 8:10pm UTC](https://discourse.openondemand.org/t/message-box-from-passenger-app/3531/4 "2024-05-31T20:10:56Z")

</div>

Everything under `/pun` will need authentication. So your users will need to authenticate to even see the application.

That said - OnDemand doesn’t deal with authentication and in-fact we strip out those Headers before the request makes it to the Passenger application. So no, OnDemand doesn’t have access to your password at any time.

Sounds like your web application needs to provide a `form` on some page so that your users can fill out to re-enter their password. When users submit the `form`, your web application can extract the information from the parameters it’s being passed.

> **[: The Form element - HTML: HyperText Markup Language | MDN](https://developer.mozilla.org/en-US/docs/Web/HTML/Element/form)**
>
> The HTML element represents a document section containing interactive controls for submitting information.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/flex015/uploads/osc/original/2X/b/bae70bd0ed39a3ae769c2108155f4cb3e9da8385.png) [@system](https://discourse.openondemand.org/u/system)\
**Post date:** [November 27, 2024, 8:11pm UTC](https://discourse.openondemand.org/t/message-box-from-passenger-app/3531/5 "2024-11-27T20:11:40Z")

</div>

Closed on November 27, 2024, 8:11pm UTC

This topic was automatically closed 180 days after the last reply. New replies are no longer allowed.