nav[aria-label="Primary Navigation"] { padding: 0; & ul { list-style: none; width: 100%; display: flex; flex-direction: row; justify-content: start; align-items: start; gap: 30px; padding: 0; & li { margin: 0; } & ul li { list-style: none; } } }

As we transition to the new Hyland Community, some post links may be temporarily disrupted as we finalize redirects. We apologize for the inconvenience and are working to resolve this as quickly as possible. Details.

Require valid SecureContext when executing public APIs?

gjferrier

Hi,

I have a servlet filter which is accessing the public NodeService API, using the preferred method of bean injection in 3.2 community edition with the Records Management module installed. However, when using the public API an exception is thrown (see below) -

net.sf.acegisecurity.AuthenticationCredentialsNotFoundException: A valid SecureContext was not provided in the RequestContext
   at net.sf.acegisecurity.intercept.AbstractSecurityInterceptor.credentialsNotFound(AbstractSecurityInterceptor.java:477)
   at net.sf.acegisecurity.intercept.AbstractSecurityInterceptor.beforeInvocation(AbstractSecurityInterceptor.java:355)
   at net.sf.acegisecurity.intercept.method.aopalliance.MethodSecurityInterceptor.invoke(MethodSecurityInterceptor.java:77)
   at org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:171)
   at org.alfresco.repo.security.permissions.impl.ExceptionTranslatorMethodInterceptor.invoke(ExceptionTranslatorMethodInterceptor.java:49)
   at org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:171)
   at org.alfresco.repo.audit.AuditMethodInterceptor.invoke(AuditMethodInterceptor.java:148)
   at org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:171)
   at org.springframework.transaction.interceptor.TransactionInterceptor.invoke(TransactionInterceptor.java:106)
   at org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:171)
   at org.springframework.aop.framework.JdkDynamicAopProxy.invoke(JdkDynamicAopProxy.java:204)
‍‍‍‍‍‍‍‍‍‍‍‍‍‍

This is using out of the box authentication with only the admin user available on the server. The alf_ticket is present and correct in the request parameter. I did not have this problem during testing against the same version, but without the RM module installed.

Any help is very much appreciated.

Cheers,

G.

Find more posts tagged with

Comments

hsohaib

Have you tried executing your code using "AuthenticationUtil.runAs()" ? a code snippet could help us understand the problem.

gjferrier

Have you tried executing your code using "AuthenticationUtil.runAs()" ? a code snippet could help us understand the problem.

No, I haven't. Although that doesn't feel like the right approach, I want the code to run as the current user. For info my filter is installed as the final filter in the chain. Here's a cut down snippet of the code -

    public void doFilter(final ServletRequest request, final ServletResponse response, final FilterChain filterChain)
            throws IOException, ServletException {
    
    filterChain.doFilter(request, response);
    
    NodeRef ref = // parse the noderef from the request object.
    // spring bean injected field using 'NodeService' from public-services-context.xml
    if (nodeService.exists(ref)) {
        // do something
    } else {
        // do something else
    }
}
‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍