Activiti REST authentication

[mhanrahan]

I've been working on integrating my application with the REST interface of Activiti 5.14, and I've noticed that not everything needs to be authenticated using basic http auth.

For example, querying for a historical process instance with the request:
http://server:8080/activiti-rest/service/history/historic-process-instances/55985
requires the authentication headers to be set to avoid a fault.

However, if I try and query for a task with the request:
http://server:8080/activiti-rest/service/query/tasks
{
"name" : "foo"
}

Is this a design decision to require authentication for only some of the requests, and if so, is there a list or a way to tell which requests do or don't require authentication?  Or is it just a bug?

[frederikherema1]

That is not a design-decision, it's indeed a bug in that particular REST-resource. Thanks for reporting, I'll fix this on master.

[yogesh1454]

Hi All
Is it is fixed

we are also facing the issue we are trying to add the Activiti Rest API in our Spring Boot Project which has its own Authentication Page ,but after adding the activiti Rest API it is over riding the Application Authentication way and poping up the basic authentication box


Please Help in Finding the Solution

[raki1497]

Is there any update on this .... please let me know what how the authorization headers are to be added in rest call 

[abbask01]

Have you tried this with Activiti 7 (latest release) ? does this problem persists in the new release as well?