IBM Support

IT48332: HTTP BASED REQUEST NODES EXPECT BEARER TOKEN DESPITE BASIC AUTH CONFIGURATION, IF THE SERVER SUPPORTS BEARER

Subscribe to this APAR

By subscribing, you receive periodic emails alerting you to the status of the APAR, along with a link to the fix after it becomes available. You can track this item individually or track all items by product.

Notify me when this APAR changes.

Notify me when an APAR for this component changes.

 

APAR status

  • Closed as program error.

Error description

  • While using ACE Designer flow in 13.0.4.0, when a HTTP Account
    is configured to use Basic Authentication, ACE expects a bearer
    token to be provided in the request headers. ACE unilaterally
    chooses a bearer token-based authentication even when it is not
    configured, but Basic Authentication is. This leads to a failure
    to authenticate to the invoked endpoint with a 401 status code
    being returned.
    

Local fix

  • NIL
    

Problem summary

  • ****************************************************************
    USERS AFFECTED:
    All users of IBM App Connect Enterprise v13 using HTTP based
    request nodes
    
    
    Platforms affected:
    WinX64, LinuxX64, LinuxZ64, AIX, LinuxPPCLE64
    
    ****************************************************************
    PROBLEM DESCRIPTION:
    When using HTTP based request nodes in IBM App Connect
    Enterprise, if the configured HTTP Account uses Basic
    Authentication, a bearer token is still expected in the request
    headers. This behavior results in the authentication defaulting
    to bearer token, even when it hasnt been configured, causing
    authentication to fail at the endpoint and returning a
    401-status code.
    
    This issue is experienced at App Connect
    Enterprise fixpack version 13.0.4.0 and above.
    

Problem conclusion

Temporary fix

Comments

APAR Information

  • APAR number

    IT48332

  • Reported component name

    APP CONNECT ENT

  • Reported component ID

    5724J0570

  • Reported release

    D0X

  • Status

    CLOSED PER

  • PE

    NoPE

  • HIPER

    NoHIPER

  • Special Attention

    NoSpecatt / Xsystem

  • Submitted date

    2025-07-21

  • Closed date

    2025-07-30

  • Last modified date

    2025-07-30

  • APAR is sysrouted FROM one or more of the following:

  • APAR is sysrouted TO one or more of the following:

Fix information

  • Fixed component name

    APP CONNECT ENT

  • Fixed component ID

    5724J0570

Applicable component levels

[{"Business Unit":{"code":"BU048","label":"IBM Software"},"Product":{"code":"SSDR5J","label":"IBM App Connect Enterprise"},"Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"13.0.0","Line of Business":{"code":"LOB77","label":"Automation Platform"}}]

Document Information

Modified date:
30 July 2025