Common security with Activiti REST API

[eao]

I can see that the REST api uses basic authentication.
Basically this means that every call must have a header where the user name and password is set.

I want to communicate with the REST api from a Liferay instance in order to run my workflows (on the same server). Is there any way I can reuse the authentication information from Liferay in order to automatically authenticate against the REST api?

Both Liferay and Activiti will use LDAP as the source for users/roles, so the same user information should apply in both places.

[eao]

I'm guessing this is related to this post http://forums.activiti.org/content/developing-custom-secured-rest-service which has not been completely answered. But the problem is the same. The Liferay cookie will provide us with the username, but probably not the password. Will it make any difference if both sources uses LDAP?

[trademak]

We'll release a standard LDAP component in 5.13, so I would think that definitely makes a difference.

Best regards,