Using auth plugin with just "WebServiceUserProfileUrl" doesn't show DICOM in viewer

General
1

Hi everybody,
I found out that if I follow the keycloak minimal setup example and I choose to implement only the user/get-profile web service method and not the others, I can explore my DICOM images, but If I want to open them in a viewer or If I want to download a DICOM, that’s not happening? Why? Is it mandatory to implement the other WebService routes?
Tks everybody,
Gio

2

Hi,

No, have a look to this sample.

Alain

3

Hi,
I tried the sample and it worked as you described. If I change a bit the configuration (in order to not use anymore the registered users) and use a configuration like the following:

services:

  orthanc:
    image: orthancteam/orthanc:25.2.0
    volumes: 
      - "orthanc-storage:/var/lib/orthanc/db"
      - "./orthanc/plugin.py:/scripts/plugin.py"
    ports: ["8042:8042"]
    depends_on: [auth-service]
    restart: unless-stopped
    environment:
      VERBOSE_STARTUP: "true"
      VERBOSE_ENABLED: "true"

      AUTHORIZATION_PLUGIN_ENABLED: "false"
      STONE_WEB_VIEWER_PLUGIN_ENABLED: "true"
      DICOM_WEB_PLUGIN_ENABLED: "true"
      PYTHON_PLUGIN_ENABLED: "true"
      OHIF_PLUGIN_ENABLED: "true"

      ORTHANC_JSON: |
        {
          "Name": "Orthanc auth test",
          "AuthenticationEnabled": false,
          "UiOptions": {
            "EnableOpenInOhifViewer3": true,
            "OhifViewer3PublicRoot": "http://localhost:8042/ohif/"
          },
          "Authorization": {
            "WebServiceUserProfileUrl": "http://auth-service:8000/user/get-profile",
            "TokenHttpHeaders": [
              "Authorization"
            ],

            "StandardConfigurations": [
              "orthanc-explorer-2",
              "ohif"
            ],
            "CheckedLevel" : "studies"
          },
          "OrthancExplorer2": {
            "Tokens": {
              // experimental, set it to false when using basic-auth together with the auth-plugin (https://discourse.orthanc-server.org/t/user-based-access-control-with-label-based-resource-access/5454)
              "RequiredForLinks": true  
            }
          },          
          "PythonScript": "/scripts/plugin.py",
          "DicomWeb": {
            "Enable": true,
            "PublicRoot": "/dicom-web/"
          },
          "OHIF": {
            "DataSource": "dicom-web",
            "RouterBasename": "/ohif/"
          }

        }

  # this web-service implements authorization checks (it is called by the authorization plugin)
  auth-service:
    build: auth-service
    restart: unless-stopped

volumes:
  orthanc-storage:

I can open the explorer but I cannot view or download the images anymore (the same thing happened with the keycloak/minimal-setup example if I define just the “WebServiceUserProfileUrl”). Why is that?
Tks
Gio