cancel
Showing results for 
Search instead for 
Did you mean: 

Developing custom secured rest service

ganeshr
Champ in-the-making
Champ in-the-making
Hi,

   I'm working on developing a custom rest services, for that I have followed the approach of creating new web project and in this project including the activiti-rest jar. Using Jersey I'm developing the new custom services. We have a siteminder to authenticate the incoming request. So each incoming request will be first authenticate by siteminder through cookie value and if valid then it will navigate the request to rest service. But I have observed that for the existing rest service it is expecting the username and password, using this credentials it is verfiying and then allowing to retrieve the details. As in our case we dont have credentials once the siteminder authenticates the request, we can only get the user id from the cookie and not the password.
  Any suggestions on how to make default activiti existing rest services to work?
1 REPLY 1

jbarrez
Star Contributor
Star Contributor
That will be difficult out of the box. You can always override the authenticate() methods in custom subclasses … but that is a lot of work.

I'll discuss tomorrow to see if there is anything we can do in the next version to simplify this.