nav[aria-label="Primary Navigation"] { padding: 0; & ul { list-style: none; width: 100%; display: flex; flex-direction: row; justify-content: start; align-items: start; gap: 30px; padding: 0; & li { margin: 0; } & ul li { list-style: none; } } }

As we transition to the new Hyland Community, some post links may be temporarily disrupted as we finalize redirects. We apologize for the inconvenience and are working to resolve this as quickly as possible. Details.

Authorisation Fails in REST

wslade

I have deployed a war (on Weblogic Server) with the explorer and the rest apis included.

I can successfully login into the explorer via browser, however when I attempt a GET /myapp/service/deployments from SOAPUI I get a 401 (or from a browser).

Now I have set the username and password in the "Authentication and Security Related settings".
I have tried with the global setting "Adds authentication information to outgoing request" on and off with no difference.

I have no errors in the app log when I start the application server.

Can anyone suggest where I can start debugging on the server.

Find more posts tagged with

Comments

frederikherema1

Are you using BASIC authentication in your rest-client?
Is your rest and explorer pointing to the same DB, containing the login-data?

wslade

I have only one spring context and they are both using the same database.

Here is the log from the request and the resposne

Thu Jun 28 18:54:36 EST 2012

EBUG

> "GET /MyService/service/deployments HTTP/1.1[\r][\n]"
Thu Jun 28 18:54:36 EST 2012

EBUG

> "Accept-Encoding: gzip,deflate[\r][\n]"
Thu Jun 28 18:54:36 EST 2012

EBUG

> "Authorization: Basic YWRtaW46YWRtaW4=[\r][\n]"
Thu Jun 28 18:54:36 EST 2012

EBUG

> "User-Agent: Jakarta Commons-HttpClient/3.1[\r][\n]"
Thu Jun 28 18:54:36 EST 2012

EBUG

> "Host: localhost:7031[\r][\n]"
Thu Jun 28 18:54:36 EST 2012

EBUG

> "[\r][\n]"
Thu Jun 28 18:54:36 EST 2012

EBUG:<< "HTTP/1.1 401 Unauthorized[\r][\n]"
Thu Jun 28 18:54:36 EST 2012

EBUG:<< "Date: Thu, 28 Jun 2012 08:54:36 GMT[\r][\n]"
Thu Jun 28 18:54:36 EST 2012

EBUG:<< "Content-Length: 1518[\r][\n]"
Thu Jun 28 18:54:36 EST 2012

EBUG:<< "Content-Type: text/html; charset=UTF-8[\r][\n]"
Thu Jun 28 18:54:36 EST 2012

EBUG:<< "WWW-Authenticate: Basic realm="WebLogic Server"[\r][\n]"

frederikherema1

That should just work… A good starting-point to debug is org.activiti.rest.application.ActivitiRestApplication.authenticate(Request, Response) and org.activiti.rest.application.ActivitiRestApplication line:90:

<br> authenticator = new ChallengeAuthenticator(null, true, ChallengeScheme.HTTP_BASIC,<br>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; "Activiti Realm") {<br>

First thing I notice is the difference in "Realm".. Try using "Activiti Realm" instead of "Weblogic Server"

wslade

I tried the alt realm (no success) however it appears that weblogic auth is taking the request.

Another thread suggested the inclusion of <enforce-valid-basic-auth-credentials>false</enforce-valid-basic-auth-credentials> in the config.xml which has worked.