Cloud Pak for Business Automation

 View Only
  • 1.  Custom REST Service Authentication

    Posted Tue January 30, 2024 03:32 PM

    I have a test REST service in BPM on cloud which I managed to call it using postman without any authentication

    How to protect custom REST Service using basic authentication?

    Ali Hamada

  • 2.  RE: Custom REST Service Authentication

    Posted Wed January 31, 2024 02:21 AM

    Hi Ali,

    you likely did not invoke it without any authentication. postman is a browser plugin and will send all your cookies to the service.

    If your user has a password, basic auth may just work. There is also a concept of system accounts. Please search documentation for "fid" or "functional id".

    I also recommend using curl instead of postman to be sure what exactly your client is sending.


    Jens Engelke