nav[aria-label="Primary Navigation"] { padding: 0; & ul { list-style: none; width: 100%; display: flex; flex-direction: row; justify-content: start; align-items: start; gap: 30px; padding: 0; & li { margin: 0; } & ul li { list-style: none; } } }

As we transition to the new Hyland Community, some post links may be temporarily disrupted as we finalize redirects. We apologize for the inconvenience and are working to resolve this as quickly as possible. Details.

Disable Activiti Spring REST API Basic Authentication

pavan496

We included activiti-rest api in our Spring boot application as a maven dependency.

<dependency>
 <groupId>org.activiti</groupId>
 <artifactId>activiti-spring-boot-starter-rest-api</artifactId>
 <version>5.17.0</version>
</dependency>
‍‍‍‍‍‍‍

We already have security configuration present in our application and we would like to use the same for security activiti's rest services as well. I have tried to search around the internet but couldn't find a direct way to disable activiti's authentication configuration.

What is happening right now is, all services of our application are processed by activiti's basic authentication set up. Is there any way we can achieve this?

Find more posts tagged with

Comments

vasile_dirla

Hey,
did you try to skip Activiti security autoconfiguration?

<code>
@EnableAutoConfiguration(exclude = {
org.activiti.spring.boot.SecurityAutoConfiguration.class
})
</code>

I didn't test it yet. (it's just theory) .
http://docs.spring.io/spring-boot/docs/current/reference/html/using-boot-auto-configuration.html

Will be nice if you could provide a sample application to show this behaviour and then the community will have some source code to play with.

evilsun

Hi, i ve managed to disable activitis spring security (we are using shiro) by excluding 4 classes :
<java>
@EnableAutoConfiguration(exclude = {
        org.activiti.spring.boot.RestApiAutoConfiguration.class,
        org.springframework.boot.autoconfigure.security.SecurityAutoConfiguration.class,
        org.activiti.spring.boot.SecurityAutoConfiguration.class,
        org.springframework.boot.actuate.autoconfigure.ManagementSecurityAutoConfiguration.class})
</java>

and overriding RestApiAutoConfiguration class - removed SecurityConfiguration conf class.

vickysirwani

I tried the above. Not working. Can you share sample code?

supersun

This might be coming late but for anybody that wants to try, this worked for me in <activiti.version>5.19.0.1</activiti.version>

@EnableAutoConfiguration(exclude = {
        org.activiti.spring.boot.RestApiAutoConfiguration.class,
        org.springframework.boot.autoconfigure.security.SecurityAutoConfiguration.class,
        org.activiti.spring.boot.SecurityAutoConfiguration.class,
        org.springframework.boot.actuate.autoconfigure.ManagementWebSecurityAutoConfiguration.class
})

amir68

I test it. Not worked for me.
please help us in other way!

jbarrez

Thanks for posting this, @supersun. I' m sure it'll help many people!

chriszhang

If do disable like this,user my custom security 4 will thow exception,How can I custom my security4 with activiti.

sayantan_sinha

I believe this might be pretty late, but for me the below worked. I am using Spring Boot 1.5.2.RELEASE and activiti 5.22.0 and activiti-rest 5.17.0.

@SpringBootApplication(exclude = {
org.springframework.boot.autoconfigure.security.SecurityAutoConfiguration.class,
org.activiti.spring.boot.SecurityAutoConfiguration.class,
org.springframework.boot.actuate.autoconfigure.ManagementWebSecurityAutoConfiguration.class })

supersun _‌ Thanks for the pointer, but if I had org.activiti.spring.boot.RestApiAutoConfiguration.class added to this, then none of the REST APIs were exposed, so that need to be taken out from the exclusion list.

Hope this helps people having similar issues.