Securing Camunda rest api with LDAP

Camunda 7 Topics Discussion & Questions
1

Hi, Im using LDAP plugin for Camunda cockpit login, however I would like to secure Camunda rest api with LDAP as well, how can I do that? I tired to create a custom authentication filter and register it, but this did not work, all requests are going through. Are there any examples?

    @Bean
    public FilterRegistrationBean<Filter> processEngineAuthenticationFilter() {
        FilterRegistrationBean<Filter> registration = new FilterRegistrationBean<>();
        registration.setName("camunda-auth");
        registration.setFilter(gemMyCustomFilter());
        registration.addUrlPatterns("/rest/*");
        registration.setOrder(1);
        return registration;
    }
2

Hi @Cynizm,

using the camunda-bpm-spring-boot-starter, the authorization is disabled by default. You have to enable it explicitly in your application.yaml: Process Engine Configuration | docs.camunda.org.

Hope this helps, Ingo

3

Hi @Ingo_Richtsmeier, I have that enablesd:

    camunda:
      bpm:
        authorization:
          enabled: true
4

Hi @Cynizm,

here is an example that has a difference to yours: code/snippets/springboot-rest-api-basic-auth at master · camunda-consulting/code · GitHub

Hope this helps, Ingo

5