Unauthorized access to TaskList APIs

Hi All,

I am trying to access Tasklists APIs from Postman, but I am getting unauthorized. I use Self-managed Camunda 8 Local installation.

cURL
curl --location ‘http://localhost:8080/v1/tasks/search’ --header ‘Content-Type: application/json’ --header ‘Authorization: Basic ZGVtbzpkZW1v’ --data ‘{
“state”: “CREATED”
}’

I use Basic Authentication: demo/demo

Any idea?

First you have to get the access Token

curl --location 'http://localhost:18080/auth/realms/camunda-platform/protocol/openid-connect/token' \
--header 'content-type: application/x-www-form-urlencoded' \
--data-urlencode 'client_id=tasklist' \
--data-urlencode 'client_secret=XALaRPl5qwTEItdwCMiPS62nVpKs7dL7' \
--data-urlencode 'grant_type=client_credentials' \
--data-urlencode 'audience=tasklist'

You can find the client_id and client_secret from identity application

then you can use the token to hit the tasklist apis

curl --location --request POST 'http://localhost:8082/v1/tasks/search' \
--header 'Authorization: Bearer <your token>' \
--data ''

Also don’t forget to provide the required access in identity otherwise you will get a 401 response while hitting the tasklist APIs

Hi @savi003

Thanks for your reply.

How can I install Identity locally in self-Managed Camunda, as per deocumentation Manual installation on local machine | Camunda 8 Docs, We can’t setup Identity locally.

Is there any misunderstanding from my side?

Sorry I misunderstood your question, I thought you were using docker. I haven’t used the local installation method.