How to secure embeded camunda rest api

aravindhrs · March 30, 2021, 1:39pm

@khalid.nouh You need to create a filter registration bean and provide an authentication provider like below:

aravindhrs/camundaenterprise/blob/master/src/main/java/com/bpm/camunda/config/CamundaSecurityFilter.java

package com.bpm.camunda.config;

import javax.servlet.Filter;
import org.camunda.bpm.engine.rest.security.auth.ProcessEngineAuthenticationFilter;
import org.springframework.boot.web.servlet.FilterRegistrationBean;
import org.springframework.context.annotation.Bean;
import org.springframework.context.annotation.Configuration;

@Configuration
public class CamundaSecurityFilter {

  @Bean
  public FilterRegistrationBean<Filter> processEngineAuthenticationFilter() {
    FilterRegistrationBean<Filter> registration = new FilterRegistrationBean<>();
    registration.setName("camunda-auth");
    registration.setFilter(getProcessEngineAuthenticationFilter());
    registration.addInitParameter("authentication-provider",
        "org.camunda.bpm.engine.rest.security.auth.impl.HttpBasicAuthenticationProvider");
    registration.addUrlPatterns("/engine-rest/*");
    registration.setOrder(1);

This file has been truncated. show original