topic Re: Authorisation Fails in REST in Alfresco Archive

Authorisation Fails in REST

wslade — Thu, 28 Jun 2012 09:11:58 GMT

I have deployed a war (on Weblogic Server) with the explorer and the rest apis included.I can successfully login into the explorer via browser, however when I attempt a GET /myapp/service/deployments from SOAPUI I get a 401 (or from a browser).Now I have set the username and password in the "Authent

Re: Authorisation Fails in REST

frederikherema1 — Thu, 28 Jun 2012 11:44:02 GMT

Are you using BASIC authentication in your rest-client?
Is your rest and explorer pointing to the same DB, containing the login-data?

Re: Authorisation Fails in REST

wslade — Thu, 28 Jun 2012 22:50:54 GMT

I have only one spring context and they are both using the same database.

Here is the log from the request and the resposne

Thu Jun 28 18:54:36 EST 2012EBUG> "GET /MyService/service/deployments HTTP/1.1[\r][\n]"
Thu Jun 28 18:54:36 EST 2012EBUG> "Accept-Encoding: gzip,deflate[\r][\n]"
Thu Jun 28 18:54:36 EST 2012EBUG> "Authorization: Basic YWRtaW46YWRtaW4=[\r][\n]"
Thu Jun 28 18:54:36 EST 2012EBUG> "User-Agent: Jakarta Commons-HttpClient/3.1[\r][\n]"
Thu Jun 28 18:54:36 EST 2012EBUG> "Host: localhost:7031[\r][\n]"
Thu Jun 28 18:54:36 EST 2012EBUG> "[\r][\n]"
Thu Jun 28 18:54:36 EST 2012EBUG:<< "HTTP/1.1 401 Unauthorized[\r][\n]"
Thu Jun 28 18:54:36 EST 2012EBUG:<< "HTTP/1.1 401 Unauthorized[\r][\n]"
Thu Jun 28 18:54:36 EST 2012EBUG:<< "Date: Thu, 28 Jun 2012 08:54:36 GMT[\r][\n]"
Thu Jun 28 18:54:36 EST 2012EBUG:<< "Content-Length: 1518[\r][\n]"
Thu Jun 28 18:54:36 EST 2012EBUG:<< "Content-Type: text/html; charset=UTF-8[\r][\n]"
Thu Jun 28 18:54:36 EST 2012EBUG:<< "WWW-Authenticate: Basic realm="WebLogic Server"[\r][\n]"

Re: Authorisation Fails in REST

frederikherema1 — Fri, 29 Jun 2012 05:21:56 GMT

That should just work… A good starting-point to debug is org.activiti.rest.application.ActivitiRestApplication.authenticate(Request, Response) and org.activiti.rest.application.ActivitiRestApplication line:90:


 authenticator = new ChallengeAuthenticator(null, true, ChallengeScheme.HTTP_BASIC,
          "Activiti Realm") {

First thing I notice is the difference in "Realm".. Try using "Activiti Realm" instead of "Weblogic Server"

Re: Authorisation Fails in REST

wslade — Fri, 29 Jun 2012 08:24:42 GMT

I tried the alt realm (no success) however it appears that weblogic auth is taking the request.

Another thread suggested the inclusion of <enforce-valid-basic-auth-credentials>false</enforce-valid-basic-auth-credentials> in the config.xml which has worked.