Hi

I usually call some REST services on with javascript inside "Script Adapters" to excute some functionality on the solutions. 

Which is your security technique to don't harcode the user and password to call REST services?
Do you use some global variables to store that information? How do you use a configuration file for it? Any samples on how?

Any samples and links to documentation are always apreciated. 

Regards

------------------------------
Martin Iturbide
Consultant
Next Step C.A.
Quito
------------------------------

You want to externalize your credentials.

You can put them into some vault (like HashiCorp or CyberArk) or you can use WebSphere's built in JAAS authentication alias mechanism:

• tWAS: https://stackoverflow.com/questions/4663534/how-to-access-authentication-alias-from-ejb-deployed-to-websphere-6-1
• Liberty: https://www.ibm.com/docs/en/was-liberty/base?topic=infrastructure-developing-programmatic-login-obtaining-authentication-data

as a quick and dirty solution you can use environment variables.
Normally you build a toolkit for a certain Rest interface (or more than only one..) 

In the Environment Variables you now may place the urls, user and password definitions for each environment (default, dev, test, staging, prod)
But take care that you encrypt sensible informations! Do not store plain text (readable) usernames and passwords there!!!

Other users may read them in ProcessAdmin...

------------------------------
Christian Sennewald
------------------------------

Thank you Jens and Christian for the feedback.

I'm  checking both alternatives, but there is a chance there is some "more baked" tutorial or documentation?

I'm learning this and I'm trying to get some samples that allow me to understand it better.

Regards

Hello

Is there any documentation on how to create "Environment Variables" on IBM Case Manager 5.3.3 ?

Regards