Web Service Security

[AdrianH]

Does anyone have any material on enabling web service security above and beyond the OOTB Bearer token stuff?

Thanks!

Any help much appreciated.

Yours,

Adrian

[Bhavin]

you can use curl or any of your fav REST API testing client like postman https://www.getpostman.com/

curl https://pipeline-url?bearer_token=abc123

Bearer token is generated when you deploy your pipeline as a triggered task – see this link for more details http://doc.snaplogic.com/tasks → Running a Pipeline from a URL section

You can also invoke pipeline by passing your snaplogic cred’s as basic auth credentials and for that

curl https://uname%40domain.com:yourPassword@pipeline-url

more info HTTP Basic Authentication - what's the expected web browser experience? - Stack Overflow

[AdrianH]

Hi,

Thanks but the curl bit doesn’t look like a secure way as the credentials appear to be exposed.

The basic auth bit below assumes that a service account has been set up correct?

Thanks!

Yours,

Adrian

[Bhavin]

yes, I wouldnt recommend curl and service account is optional, have you tried postman? it lets you set basic auth in a secure way, pwd is masked

[Piyush]

I guess there is none for standard pipelines