Secure camunda ENDPOINT API

[budiman_rahardjo]

Hi guys,

how to secure camunda endpoint API? so that other people can’t hit my API, because i want to up in public IP.
any cant help me to explain abount this?

thanks

[Ingo_Richtsmeier]

Hi @budiman_rahardjo,

have a look into the docs: https://docs.camunda.org/manual/7.14/reference/rest/overview/authentication/

Hope this helps, Ingo

[aravindhrs]

@budiman_rahardjo Equivalent java config for which @Ingo_Richtsmeier is referring:

Authorization for Camunda REST API

Camunda supports Basic Auth mechanism, by default it was disabled. You can enable if needed. For JWT Authorization, you can provide configurations by using Spring Security module. You need to include jjwt.jar dependency in classpath for JWT Authorization. Refer this docs for JWT implementation: https://github.com/jwtk/jjwt Code for enabling Basic Auth: @Configuration public class CamundaSecurityFilter { @Bean public FilterRegistrationBean<Filter> processEngineAuthenticationFilter() { …

[madhusudhan.vasala]

Hi Ingo,

I have followed the steps from “Configure Authentication | docs.camunda.org” and kept one system.out.println statement under ProcessEngineAuthenticationFilter.java. While running “http://localhost:8080/engine-rest/engine/” from Postman sys out was not printed in the console. Could you please suggest what I am missing here?

Thanks,
Madhu Vasala