[REST API] Web services Security

Camunda 7 Topics Discussion & Questions
1

Hello,

The web services provided by the API are not secured by default i think, is there any way with camunda in order that these web services go through an authentication or token process ?

If yes how do i configure a camunda project (pom.xml and properties)
If No is it possible to integrate Spring Security for the subject.

Thanks.

2

If using OAuth2 you should configure your project as a ResourceSever. Add security checking like this:
@Override
public void configure(HttpSecurity http) throws Exception {
http.csrf().disable()
.authorizeRequests()
.antMatchers("/rest/**").authenticated();
}

3

Thanks

I will see this solution.

4