This is an old revision of the document!

Authentication

Custom Authorization for (REST) services

For setting up a custom authentication service for API's (on service package) the following is needed:

Rule type	Description
Authentication service rule (type custom)	Umbrella for the authentication
Timeout activity	Activity that optionally contains logic that will be run on timeout
Authentication Activity	Activity with purpose of authenticating the requestor.

On Serivce tab: Indicate a timeout activity (implementation can be empty) and Indicate a Authentication Activity (needs implementation, described later.)
On Custom tab: (choose Use externally stored credentials, must match the “Use external authentication” setting on operator page which is the result of the authentication activity)

The purpose of the activity is to do the actual authentication. Successfull authentication is indicated by a couple of parameters:

pyOperPage must be a data-admin-operator-id (the identified operator) clipboard page (as java object)
pyUserIdentifier → operator identifier.

tools.putParamValue("pyOperPage", myStepPage);
tools.putParamValue("pyUserIdentifier", myStepPage.getString("pyUserIdentifier"));