Using auth plugin with just "WebServiceUserProfileUrl" doesn't show DICOM in viewer

General
1

Hi everybody,
I found out that if I follow the keycloak minimal setup example and I choose to implement only the user/get-profile web service method and not the others, I can explore my DICOM images, but If I want to open them in a viewer or If I want to download a DICOM, that’s not happening? Why? Is it mandatory to implement the other WebService routes?
Tks everybody,
Gio

2

Hi,

No, have a look to this sample.

Alain

3

Hi,
I tried the sample and it worked as you described. If I change a bit the configuration (in order to not use anymore the registered users) and use a configuration like the following:

services:

  orthanc:
    image: orthancteam/orthanc:25.2.0
    volumes: 
      - "orthanc-storage:/var/lib/orthanc/db"
      - "./orthanc/plugin.py:/scripts/plugin.py"
    ports: ["8042:8042"]
    depends_on: [auth-service]
    restart: unless-stopped
    environment:
      VERBOSE_STARTUP: "true"
      VERBOSE_ENABLED: "true"

      AUTHORIZATION_PLUGIN_ENABLED: "false"
      STONE_WEB_VIEWER_PLUGIN_ENABLED: "true"
      DICOM_WEB_PLUGIN_ENABLED: "true"
      PYTHON_PLUGIN_ENABLED: "true"
      OHIF_PLUGIN_ENABLED: "true"

      ORTHANC_JSON: |
        {
          "Name": "Orthanc auth test",
          "AuthenticationEnabled": false,
          "UiOptions": {
            "EnableOpenInOhifViewer3": true,
            "OhifViewer3PublicRoot": "http://localhost:8042/ohif/"
          },
          "Authorization": {
            "WebServiceUserProfileUrl": "http://auth-service:8000/user/get-profile",
            "TokenHttpHeaders": [
              "Authorization"
            ],

            "StandardConfigurations": [
              "orthanc-explorer-2",
              "ohif"
            ],
            "CheckedLevel" : "studies"
          },
          "OrthancExplorer2": {
            "Tokens": {
              // experimental, set it to false when using basic-auth together with the auth-plugin (https://discourse.orthanc-server.org/t/user-based-access-control-with-label-based-resource-access/5454)
              "RequiredForLinks": true  
            }
          },          
          "PythonScript": "/scripts/plugin.py",
          "DicomWeb": {
            "Enable": true,
            "PublicRoot": "/dicom-web/"
          },
          "OHIF": {
            "DataSource": "dicom-web",
            "RouterBasename": "/ohif/"
          }

        }

  # this web-service implements authorization checks (it is called by the authorization plugin)
  auth-service:
    build: auth-service
    restart: unless-stopped

volumes:
  orthanc-storage:

I can open the explorer but I cannot view or download the images anymore (the same thing happened with the keycloak/minimal-setup example if I define just the “WebServiceUserProfileUrl”). Why is that?
Tks
Gio

4

Hi everybody,

I’m trying to use the Authorization Plugin in the same way described by Gio.

I only want my backend service to handle requests to the user/get-profile API, without providing any links to view or download images. Therefore, I don’t need to implement the tokens/viewer-instant-link or tokens/download-instant-link APIs, nor the encode and decode APIs.

The problem is that when I configure only WebServiceUserProfileUrl, it doesn’t seem to work.

Is there any specific configuration required to use OE2 with the Authorization Plugin relying only on the User Profile API?

Thanks in advance,
Lorenzo