title: Direct URLs to access reports - JasperServer
body: <p>I've been working with JasperReports on JasperServer recently. After reading their documentation, they say that any report on the JasperServer repository can be accessed via a direct URL. With a couple of name value pairs in the URL (GET), such as reportName, output, username and password, a particular report can be retrieved.</p>
  
  <p>My question is, how would one allow people to access reports via direct URLs without people seeing all of the info (especially username and password) in the address bar? It seems like this is very unsafe.</p>
  
  <p>There are some smart people at JasperSoft, so I must be missing something.</p>
  
  <p>How would I still use direct URLs without showing all of the parameters for others to erase and fill in? Some of you might answer saying just to change the form submission to a POST, but I wouldn't even know where to begin to change that code on JasperServer.</p>
  
  <p>P.S. I will be handling network security at least with SSL.</p>
  
  <p>Any explanation would be very helpful.</p>