Skip to main content
Solved

IFS Cloud: REST API int/main


Darshana Herath
Hero (Former Employee)
Forum|alt.badge.img+14

 

Hi All,

In App 10, we can use the APIs in compatibility application type and access them through the int gateway. However, it seems this option is not available in the cloud. Is there any possibility to expose all main APIs through the int gateway?

Best regards,
 

APP10

 

Cloud

 

Best answer by Rifki Razick

Hi,

The main reason to have the “Include in Application Compatibility Type” feature in IFSAPPS 10 was to make it possible to use http basic authentication on the “int” context for APIs that were available on the “main” context. However IFS Cloud no longer supports/recommends http basic authentication due to security reasons. This means you can directly use the APIs from the main context using OAuth negating the need for “Include in Application Compatibility Type” in IFS Cloud.

 

View original
Did this topic help you find an answer to your question?

6 replies

Rifki Razick
Hero (Employee)
Forum|alt.badge.img+9
  • Hero (Employee)
  • 72 replies
  • Answer
  • April 10, 2024

Hi,

The main reason to have the “Include in Application Compatibility Type” feature in IFSAPPS 10 was to make it possible to use http basic authentication on the “int” context for APIs that were available on the “main” context. However IFS Cloud no longer supports/recommends http basic authentication due to security reasons. This means you can directly use the APIs from the main context using OAuth negating the need for “Include in Application Compatibility Type” in IFS Cloud.

 


Charith Epitawatta
Ultimate Hero (Employee)
Forum|alt.badge.img+31

Hi @Darshana Herath,

You can do this by setting the ifsappproxy.basicAuthEnabled to true in the ifscloud-values.yaml file. However, as Rifki has mentioned above, and the documentation itself has emphasized, this compromises system security, hence highly not recommended. 

https://docs.ifs.com/techdocs/23r2/070_remote_deploy/010_installing_fresh_system/200_installing_ifs_cloud/035_ifs_cloud_ifsinstaller/030_installation_parameters/#parameters_for_proxy

Hope this helps!


Forum|alt.badge.img+1
  • Do Gooder (Partner)
  • 4 replies
  • April 16, 2024

Hi @Charith Epitawatta

Does this mean, using Main would compromise security? We are facing some issues when trying to setup a simple integration and for us, Int cluster is not working. Replacing the Int with Main is allowing us to access the API. 

Thanks. 


Darshana Herath
Hero (Former Employee)
Forum|alt.badge.img+14
  • Author
  • Hero (Former Employee)
  • 115 replies
  • April 17, 2024

Hi @Rifki Razick and @Charith Epitawatta ,

 

Yes, I agree with you.

But conceptually, we should use "int" for end-to-end system integrations and "main" for integrations involving user interactions.

@Charith Epitawatta , if we configure ifsappproxy.basicAuthEnable, will it enable the button for the compatibility option?


Darshana Herath
Hero (Former Employee)
Forum|alt.badge.img+14
  • Author
  • Hero (Former Employee)
  • 115 replies
  • April 17, 2024
thprlkARC wrote:

Hi @Charith Epitawatta

Does this mean, using Main would compromise security? We are facing some issues when trying to setup a simple integration and for us, Int cluster is not working. Replacing the Int with Main is allowing us to access the API. 

Thanks. 

Hi @thprlkARC ,

Is this App10, what is the error?

Make sure to add the API to compatible mood.

 

 


Charith Epitawatta
Ultimate Hero (Employee)
Forum|alt.badge.img+31

Hi @Darshana Herath,

Darshana Herath wrote:

 

@Charith Epitawatta , if we configure ifsappproxy.basicAuthEnable, will it enable the button for the compatibility option?

I haven’t tried this myself, but it will not enable the button you are referring to which is available in IFSAPP10. This change is done in proxy level. Therefore, once the change is done, if you describe the ifsapp-proxy container, you would see the environment variable “BASIC_AUTH” is set to enabled. 

kubectl describe pod ifsapp-proxy-xxxxxxxx-xxxx -n <namespace>

Hope this helps!


Reply


Cookie policy

We use cookies to enhance and personalize your experience. If you accept you agree to our full cookie policy. Learn more about our cookies.

 
Cookie settings