topic Re: How can I allow Authorization - Bearer token in alfresco rest requests? in Alfresco Forum

How can I allow Authorization - Bearer token in alfresco rest requests?

fastdev — Mon, 17 Jun 2019 13:32:33 GMT

It's possible to allow Authorization Bearer token in alfresco requests? how can I do that?When I try to reach any endpoint, ex: curl --header "Authorization: Bearer xxx.xxxx" http://localhost/alfresco/s/... I get this error:"status" : { "code" : 401, "name" : "Unautho

Re: How can I allow Authorization - Bearer token in alfresco rest requests?

alxgomz — Wed, 19 Jun 2019 08:28:07 GMT

Hi T Dias‌,

To me this means your clients requests land on the alfresco servlet container with an HTTP "Authorization" header of type "Bearer".

This type is not recognized by Alfresco out-of-the-box, hence the message.

You may have this authentication type set either by your client or by a reverse proxy in between?

Maybe can you clarify how you installed Alfresco and how is it integrated with other services?

Regards,

Re: How can I allow Authorization - Bearer token in alfresco rest requests?

fastdev — Thu, 27 Jun 2019 10:55:43 GMT

Hi Alexandre Chapellon,

Thanks for your answer.

I found that you added a topic about "Collaborative Edition on Alfresco using LibreOffice Online", that is more or less what I'm trying to accomplish.

The problem that I found is that libreoffice add an Authorization header of type bearer in the request send to alfresco.

My environment:

dockerized alfresco without alfresco share
libreoffice module installed in alfresco
alfresco in multi-tenant environment

Any idea about this?

Regards

Re: How can I allow Authorization - Bearer token in alfresco rest requests?

AlfrescoZZZ — Wed, 28 Apr 2021 09:04:21 GMT

Have you found a solution?

Re: How can I allow Authorization - Bearer token in alfresco rest requests?

arjunmony — Wed, 28 Apr 2021 20:02:49 GMT

Hello,

Instaed Bearer you should use the alf_ticket param in your curl call. First thing you do is call the login web script to get a ticket.

curl -v "http://localhost:8080/alfresco/service/api/login?u=admin&pw=yourpassword"

Alfresco will respond with something like:

TICKET_e46107058fdd2760441b44481a22e7498e7ddfsf

Now you can take that ticket and append it to your subsequent web script calls.

Then post it to the web script using curl, like this:

curl -v -X POST "http://localhost:8080/alfresco/service/someco/someScript?alf_ticket=TICKET_e46107058fdd2760441b44481a22e7498e7dbf66" -H "Content-Type: application/json" -d @/Users/arjunm/test.json