Answers to: How can i do my Webservice Secure

Comment by Reto Weiss on Reguel Wermelinger's answer

Reto Weiss — Wed, 15 Jun 2016 15:49:01 -0400

Update: Starting with Axon.ivy BPM Suite 6.0.4 and 6.2 WebService Processes also supports HTTP Basic authentification. Therefore both WebService Call process element and WebService process supports now a common authentication mechanism.

Comment by Dominik Regli on Reguel Wermelinger's answer

Dominik Regli — Thu, 04 Sep 2014 11:23:54 -0400

This Q&A entry describes How to call a secured WS Process with a WS Call Element. But works only for ivy versions 4.3.24, 5.0.14 and 5.1.0 or greater.

Comment by tauser on Reguel Wermelinger's answer

tauser — Wed, 16 Jul 2014 13:43:08 -0400

thank you for your answer... it is bad for us, no wrapper, we have on first server ivy application providing ws, on second server ivy application calling ws.

Comment by Reguel Wermelinger on Reguel Wermelinger's answer

Reguel Wermelinger — Mon, 14 Jul 2014 15:27:14 -0400

With a Webservice Call in ivy step you can not call this secured ivy WS Process.

See #22823: Support common authentication for WS Step and WS Proc

I suggest that you use the Webservice Process only as wrapper for a callable SubProcess. And call the subProcess directly if you like to invoke this logic from another process.

Comment by tauser on Reguel Wermelinger's answer

tauser — Mon, 14 Jul 2014 14:35:41 -0400

thx, it works... Now we can call it from SOAP UI also on server. But if we call it from designer, we get the error. Is there also some workaround ?

AxisFault: An error was discovered processing the wsse:Security header

Comment by Reguel Wermelinger on Reguel Wermelinger's answer

Reguel Wermelinger — Thu, 03 Jul 2014 08:51:55 -0400

The HIERARCHY_REQUEST_ERR is fixed in the next major release (5.1 Lauberhorn). So the basic authentication will work out of the box without a work around. If you want to give it a try, Lauberhorn 5.1 is already available as Release Candidate download

Comment by Reguel Wermelinger on Reguel Wermelinger's answer

Reguel Wermelinger — Fri, 27 Jun 2014 15:02:40 -0400

This is a known issue of Xpert.ivy. You can track it in the soreconnect under #22513: Web Service Process with WS Security does not work on Server

You can workaround the problem by removing the shipped AXIS2 SAAJ jars. So in more detail:

Rename the jars axis2-saaj-1.3.jar & axis2-saaj-api-1.3.jar to an unusable extension. like: .jar.inactive

Comment by Karel Tauser on Reguel Wermelinger's answer

Karel Tauser — Wed, 25 Jun 2014 17:53:03 -0400

Hi,thx for your help. It is working good with designer, starting it from server (5.0) i receive always error: HIERARCHY_REQUEST_ERR: An attempt was made to insert a node where it is not permitted

Should be something set on server?

Comment by Reguel Wermelinger on Reguel Wermelinger's answer

Reguel Wermelinger — Mon, 23 Jun 2014 14:02:33 -0400

user1 is a sample for an ivy user. In this case I've created a Test User in the designer. In production it normally make sense to have a technical user + role with very limited rights.

Comment by Karel Tauser on Reguel Wermelinger's answer

Karel Tauser — Mon, 23 Jun 2014 13:32:07 -0400

thanks, you are right, i tested it already. But where is the user "user1" defined. Is it a Ivy user?

Answer by Reguel Wermelinger

Reguel Wermelinger — Fri, 20 Jun 2014 13:57:06 -0400

The ivy WebServiceProcess supports Basic authentication. You can enable it as follows:

Right click on the process in the ivyProject tree
Choose the "Inscription" context menu entry
Navigate to the "Web Service Process" tab
Choose "HTTP Basic" as Web Service authentication

You can proof the configuration with SOAP UI. Simple calls requests to WS process starts should no longer be possible.

Please consult the designer guide for further information: Web Service Process Properties

Comment by Karel Tauser on Daniel Oechslin's answer

Karel Tauser — Fri, 13 Jun 2014 13:32:39 -0400

it is not german ;-) So, i would like to use IVY STANDARD Web Services Element. Is there any possibility to secure the call in easy way ?

Comment by Daniel Oechslin on Daniel Oechslin's answer

Daniel Oechslin — Thu, 12 Jun 2014 14:09:02 -0400

Could you write your question in your mothertongue?

Comment by Karel Tauser on Daniel Oechslin's answer

Karel Tauser — Thu, 12 Jun 2014 12:48:30 -0400

we would like to use WS Process for webservice, how to combine with own authentification ?

Answer by Daniel Oechslin

Daniel Oechslin — Tue, 10 Jun 2014 15:23:33 -0400

You can build your own authentication. I think there is none in ivy yet. For some sample code see WS-Secure. I used it in non ivy projects and it worked perfectly.