Topic
IC4NOTICE: developerWorks Community will be offline May 29-30, 2015 while we upgrade to the latest version of IBM Connections. For more information, read our upgrade FAQ.
3 replies Latest Post - ‏2013-01-29T02:09:19Z by swlinn
SystemAdmin
SystemAdmin
6772 Posts
ACCEPTED ANSWER

Pinned topic BasicAuth policy with XML firewall

‏2013-01-28T19:08:40Z |
Hello

We have a ReST service developed using XML firewall. Now we need to add HTTP Basic authentication in the HTTP Headers going out of XML firewall.
We have created a user agent with BasicAuth policy and added to XML manager in XMLFW. But the Basic authentication is not added to HTTP header in the request.

So we redeveloped the ReST service gateway through MPGW and added same XML manager. Now the basic authentication is added in HTTP header.

We have come to know that we can add HTTP header using XSL in policy. But we don't want to add using XSL.

Please let me know how to make it happen in XML firewall.

Thanks
Anand
Updated on 2013-01-29T02:09:19Z at 2013-01-29T02:09:19Z by swlinn
  • Liv2luv
    Liv2luv
    573 Posts
    ACCEPTED ANSWER

    Re: BasicAuth policy with XML firewall

    ‏2013-01-28T22:10:58Z  in response to SystemAdmin
    I would try using the 'header injection parameters' in XML FW

    Direction: Back
    Header Name: Authorization
    Header Value: Basic YmVucGJvY0FmZXBvUy5jb206cnVsZAM=
  • HermannSW
    HermannSW
    4488 Posts
    ACCEPTED ANSWER

    Re: BasicAuth policy with XML firewall

    ‏2013-01-28T22:36:05Z  in response to SystemAdmin
    May you attach an export containing both services?
    Such an export will answer some questions (incl. Firmware version).

     
    Hermann<myXsltBlog/> <myXsltTweets/>
  • swlinn
    swlinn
    1346 Posts
    ACCEPTED ANSWER

    Re: BasicAuth policy with XML firewall

    ‏2013-01-29T02:09:19Z  in response to SystemAdmin
    The service's user agent contains a tab that allows you to specify a basic auth policy. The user agent is referenced by the xml manager which is referenced by your service. As a best practice, never update the default xml manager or user agent, but instead create new objects for this purpose.

    Regards,
    Steve