Question

IFS Cloud: REST API int/main

  • 10 April 2024
  • 6 replies
  • 63 views
Darshana Herath
Rank
Userlevel 6
Badge +14

 

Hi All,

In App 10, we can use the APIs in compatibility application type and access them through the int gateway. However, it seems this option is not available in the cloud. Is there any possibility to expose all main APIs through the int gateway?

Best regards,
 

APP10

 

Cloud

 

https://www.linkedin.com/in/darshana-herath

6 replies

Rifki Razick
Rank
Userlevel 4
Badge +9

Hi,

The main reason to have the “Include in Application Compatibility Type” feature in IFSAPPS 10 was to make it possible to use http basic authentication on the “int” context for APIs that were available on the “main” context. However IFS Cloud no longer supports/recommends http basic authentication due to security reasons. This means you can directly use the APIs from the main context using OAuth negating the need for “Include in Application Compatibility Type” in IFS Cloud.

 

Rifki
Charith Epitawatta
Rank
Userlevel 7
Badge +31

Hi @Darshana Herath,

You can do this by setting the ifsappproxy.basicAuthEnabled to true in the ifscloud-values.yaml file. However, as Rifki has mentioned above, and the documentation itself has emphasized, this compromises system security, hence highly not recommended. 

https://docs.ifs.com/techdocs/23r2/070_remote_deploy/010_installing_fresh_system/200_installing_ifs_cloud/035_ifs_cloud_ifsinstaller/030_installation_parameters/#parameters_for_proxy

Hope this helps!

Charith - https://charith.xyz
T
Rank
Badge +1

Hi @Charith Epitawatta, 

Does this mean, using Main would compromise security? We are facing some issues when trying to setup a simple integration and for us, Int cluster is not working. Replacing the Int with Main is allowing us to access the API. 

Thanks. 

Darshana Herath
Rank
Userlevel 6
Badge +14

Hi @Rifki Razick and @Charith Epitawatta ,

 

Yes, I agree with you.

But conceptually, we should use "int" for end-to-end system integrations and "main" for integrations involving user interactions.

@Charith Epitawatta , if we configure ifsappproxy.basicAuthEnable, will it enable the button for the compatibility option?

https://www.linkedin.com/in/darshana-herath
Darshana Herath
Rank
Userlevel 6
Badge +14

Hi @Charith Epitawatta, 

Does this mean, using Main would compromise security? We are facing some issues when trying to setup a simple integration and for us, Int cluster is not working. Replacing the Int with Main is allowing us to access the API. 

Thanks. 

Hi @thprlkARC ,

Is this App10, what is the error?

Make sure to add the API to compatible mood.

 

 

https://www.linkedin.com/in/darshana-herath
Charith Epitawatta
Rank
Userlevel 7
Badge +31

Hi @Darshana Herath,

 

@Charith Epitawatta , if we configure ifsappproxy.basicAuthEnable, will it enable the button for the compatibility option?

I haven’t tried this myself, but it will not enable the button you are referring to which is available in IFSAPP10. This change is done in proxy level. Therefore, once the change is done, if you describe the ifsapp-proxy container, you would see the environment variable “BASIC_AUTH” is set to enabled. 

kubectl describe pod ifsapp-proxy-xxxxxxxx-xxxx -n <namespace>

Hope this helps!

Charith - https://charith.xyz

Reply


Terms & ConditionsCookie settings