cancel
Showing results for 
Search instead for 
Did you mean: 

Activiti hosted in tomcat 7 and sso on rest calls

ilansch
Champ in-the-making
Champ in-the-making
Hi all,
This is infrastructure question.
We are hosting activiti in tomcat 7.
When an HTTP request is sent from rest-client to tomcat (hosting Activiti REST API web) we must set header that contains the 64Base string of the authentication, and use Basic authentication.
We would like to use spengo with the build-in tomcat SSO support - https://tomcat.apache.org/tomcat-7.0-doc/windows-auth-howto.html

This means that the client that make the rest api call, instead of setting a header with credential, will automatically send the credential of the logged-in user (Windows active directory intranet enviroment) and tomcat verifies it automatically.
We need to configure jaas and spengo as far as i read.

Anyone ever tried it ?


Thanks

1 REPLY 1

jbarrez
Star Contributor
Star Contributor
It means you'll have to override the default SecurityConfiguration of the rest app: https://github.com/Activiti/Activiti/blob/master/modules/activiti-webapp-rest2/src/main/java/org/act...