11.7. REST Interface Security

Procedure 11.2. Enable Security for the REST Endpoint

1. Specify Security Parameters

   Ensure that the rest endpoint specifies a valid value for the security-domain and auth-method parameters. Recommended settings for these parameters are as follows:

   <subsystem xmlns="urn:infinispan:server:endpoint:6.1">
               <rest-connector virtual-server="default-host" 
                               cache-container="local" 
                               security-domain="other" 
                               auth-method="BASIC"/>
   </subsystem>

   Copy to Clipboard

2. Check Security Domain Declaration

   Ensure that the security subsystem contains the corresponding security-domain declaration. For details about setting up security-domain declarations, see the JBoss Enterprise Application Platform 6 documentation.

3. Add an Application User

   Run the relevant script and enter the configuration settings to add an application user.
   1. Run the adduser.sh script (located in $JDG_HOME/bin).
      • On a Windows system, run the adduser.bat file (located in $JDG_HOME/bin) instead.
   2. When prompted about the type of user to add, select Application User (application-users.properties) by entering b.
   3. Accept the default value for realm (ApplicationRealm) by pressing the return key.
   4. Specify a username and password.
   5. When prompted for a group, enter REST.
   6. Ensure the username and application realm information is correct when prompted and enter "yes" to continue.

4. Verify the Created Application User

   Ensure that the created application user is correctly configured.
   1. Check the configuration listed in the application-users.properties file (located in $JDG_HOME/standalone/configuration/). The following is an example of what the correct configuration looks like in this file:

      user1=2dc3eacfed8cf95a4a31159167b936fc

      Copy to Clipboard
   2. Check the configuration listed in the application-roles.properties file (located in $JDG_HOME/standalone/configuration/). The following is an example of what the correct configuration looks like in this file:

      user1=REST

      Copy to Clipboard

5. Test the Server

   Start the server and enter the following link in a browser window to access the REST endpoint:

   http://localhost:8080/rest/namedCache

   Copy to Clipboard

   Note

   If testing using a GET request, a 405 response code is expected and indicates that the server was successfully authenticated.