Questo contenuto non è disponibile nella lingua selezionata.
Chapter 3. Business application configuration
3.1. Business application authentication and authorization Copia collegamentoCollegamento copiato negli appunti!
By default, business applications are secured by protecting all REST endpoints (URLs that contain /rest/). In addition, business applications have two sets of log in credentials that allow users to connect to Business Central in development mode: the user with the ID user and password user and the user with the ID kieserver and password kieserver1!.
Both authentication and authorization is based on Spring security. Alter this security configuration for all business applications used in production environments. You can make configuration changes in the <business-application>/<business-application>-services/src/main/java/com/company/service/DefaultWebSecurityConfig.java file:
3.2. Configuring the application.properties file Copia collegamentoCollegamento copiato negli appunti!
After you create your business application, you can configure several components through the application.properties file to customize your application.
Prerequisites
-
You have a
<business-application>.zipfile that you created using the business application website.
Procedure
-
Unzip the
<business-application>.zipfile and navigate to the<business-application>/<business-application>-service/src/main/resourcesfolder. -
Open the
application.propertiesfile in a text editor. Configure the host, port, and path for the REST endpoints, for example:
server.address=localhost server.port=8090 cxf.path=/rest
server.address=localhost server.port=8090 cxf.path=/restCopy to Clipboard Copied! Toggle word wrap Toggle overflow Configure the Process Server (
kieserver) so that it can be easily identified, for example:kieserver.serverId=<business-application>-service kieserver.serverName=<business-application>-service kieserver.location=http://localhost:8090/rest/server kieserver.controllers=http://localhost:8080/business-central/rest/controller
kieserver.serverId=<business-application>-service kieserver.serverName=<business-application>-service kieserver.location=http://localhost:8090/rest/server kieserver.controllers=http://localhost:8080/business-central/rest/controllerCopy to Clipboard Copied! Toggle word wrap Toggle overflow The following table lists the Process Server parameters that you can configure in your business application:
Expand Table 3.1. kieserver parameters Parameter Values Description kieserver.serverIdstring
The ID used to identify the business application when connecting to the Process Automation Manager controller.
kieserver.serverNamestring
The name used to identify the business application when connecting to the Process Automation Manager controller. Can be the same string used for the
kieserver.serverIdparameter.kieserver.locationURL
Used by other components that use the REST API to identify the location of this server. Do not use the location as defined by
server.addressandserver.port.kieserver.controllersURLs
A comma-separated list of controller URLs.
To enable asynchronous execution, set the value of the
jbpm.executor.enabledparameter totrue, uncomment the otherjbpm.executorparameters, and change the values as required, for example:jbpm.executor.enabled=true jbpm.executor.retries=5 jbpm.executor.interval=0 jbpm.executor.threadPoolSize=1 jbpm.executor.timeUnit=SECONDS
jbpm.executor.enabled=true jbpm.executor.retries=5 jbpm.executor.interval=0 jbpm.executor.threadPoolSize=1 jbpm.executor.timeUnit=SECONDSCopy to Clipboard Copied! Toggle word wrap Toggle overflow The following table lists the executor parameters that you can configure in your business application:
Expand Table 3.2. Executor parameters Parameter Values Description jbpm.executor.enabledtrue, falseDisables or enables the executor component.
jbpm.executor.retriesinteger
Specifies the number of retries if errors occur while a job is running.
jbpm.executor.intervalinteger
Specifies the length of time that the executor uses to synchronize with the database. The unit of time is specified by the
jbpm.executor.timeUnitparameter. Disabled by default (value0).jbpm.executor.threadPoolSizeinteger
Specifies the thread pool size.
jbpm.executor.timeUnitstring
Specifies the time unit used to calculate the interval that the executor uses to synchronize with the database. The value must be a valid constant of
java.util.concurrent.TimeUnit. The default value isSECONDS.If you selected Business Automation when you created your business application, specify which of the following components that you want to start at runtime:
Expand Table 3.3. kieserver capabilities parameters Parameter Values Description kieserver.drools.enabledtrue, falseEnables or disables the Decision Manager component.
kieserver.dmn.enabledtrue, falseEnables or disables the Decision Model and Notation (DMN) component.
kieserver.jbpm.enabledtrue, falseEnables or disables the Red Hat Process Automation Manager component.
kieserver.jbpmui.enabledtrue, falseEnables or disables the Red Hat Process Automation Manager UI component.
kieserver.casemgmt.enabledtrue, falseEnables or disables the case management component.
3.3. Configuring the business application with Red Hat Single Sign-On Copia collegamentoCollegamento copiato negli appunti!
You can use Red Hat Single Sign-On (RH SSO) to enable single sign-on between your services and to have a central place to configure and manage your users and roles.
Prerequisites
-
You have a
<business-application>.zipfile that you created using the business applications website.
Procedure
- Download and install RH SSO. For instructions, see the Red Hat Single Sign-On Getting Started Guide.
Configure RH SSO:
- Either use the default master realm or create a new realm.
-
Create the
springboot-appclient and set theAccessTypeto public. Set a valid redirect URI and web origin according to your local setup, for example:
-
Valid redirect URIs:
http://localhost:8090/* -
Web origin:
http://localhost:8090
-
Valid redirect URIs:
- Create realm roles that are used in the application.
- Create users that are used in the application and assign roles to them.
Add the following dependencies to the service project
pom.xmlfile:Copy to Clipboard Copied! Toggle word wrap Toggle overflow Update the
application.propertiesfile:Copy to Clipboard Copied! Toggle word wrap Toggle overflow Modify the
DefaultWebSecurityConfig.javafile to ensure that Spring Security works correctly with RH SSO:Copy to Clipboard Copied! Toggle word wrap Toggle overflow
3.4. Configuring the business application for a cluster using Quartz Copia collegamentoCollegamento copiato negli appunti!
If you plan to run your application in a cluster you must configure the Quartz timer service.
Prerequisites
-
You have a
<business-application>.zipfile that you created using the business application website, that you want to use in a cluster.
Procedure
Create the
quartz.propertiesfile and add the following content:Copy to Clipboard Copied! Toggle word wrap Toggle overflow NoteData source names in the Quartz configuration file refer to Spring beans. The connection provider must be set to
org.jbpm.springboot.quartz.SpringConnectionProviderto enable integration with Spring-based data sources.Include the following properties in the
<business-application>/<business-application>-service/src/main/resourcesapplication.propertiesfile to enable the Quartz clustered timers and set the path of thequartz.propertiesfile that you created in the previous step:jbpm.quartz.enabled=true jbpm.quartz.configuration=quartz.properties
jbpm.quartz.enabled=true jbpm.quartz.configuration=quartz.propertiesCopy to Clipboard Copied! Toggle word wrap Toggle overflow Create a managed and an unmanaged data source by adding the following content to the
<business-application>/<business-application>-service/src/main/resources/application.propertiesfile:Copy to Clipboard Copied! Toggle word wrap Toggle overflow In the preceding example, replace
<QUARTZ_TABLES_H2>with the name of a Quartz H2 database schema script. The last three lines of the preceding configuration initialize the database schema.
By default, Quartz requires two data sources:
- Managed data source to participate in the transaction of the decision engine or process engine
- Unmanaged data source to look up timers to trigger without any transaction handling
Red Hat Process Automation Manager business applications assume that the Quartz database (schema) will be co-located with Red Hat Process Automation Manager tables and therefore produce data sources used for transactional operations for Quartz.
The other (non transactional) data source must be configured but it should point to the same database as the main data source.
3.5. Configuring business application user group providers Copia collegamentoCollegamento copiato negli appunti!
With Red Hat Process Automation Manager, you can manage human-centric activities. To provide integration with user and group repositories, you can use two KIE API entry points:
-
UserGroupCallback: Responsible for verifying whether a user or group exists and for collecting groups for a specific user -
UserInfo: Responsible for collecting additional information about users and groups, for example email addresses and preferred language
You can configure both of these components by providing alternative code, either code provided out of the box or custom developed code.
For the UserGroupCallback component, retain the default implementation because it is based on the security context of the application. For this reason, it does not matter which backend store is used for authentication and authorisation (for example, RH-SSO). It will be automatically used as a source of information for collecting user and group information.
The UserInfo component is a separate component because it collects more advanced information.
Prerequisites
-
You have a
<business-application>.zipfile that you created using the business application website and that contains a business automation project.
Procedure
To provide an alternative implementation of
UserGroupCallback, add the following code to the Application class or a separate class annotated with@Configuration:@Bean(name = "userGroupCallback") public UserGroupCallback userGroupCallback(IdentityProvider identityProvider) throws IOException { return new MyCustomUserGroupCallback(identityProvider); }@Bean(name = "userGroupCallback") public UserGroupCallback userGroupCallback(IdentityProvider identityProvider) throws IOException { return new MyCustomUserGroupCallback(identityProvider); }Copy to Clipboard Copied! Toggle word wrap Toggle overflow To provide an alternative implementation of
UserInfo, add the following code to the Application class or a separate class annotated with@Configuration:@Bean(name = "userInfo") public UserInfo userInfo() throws IOException { return new MyCustomUserInfo(); }@Bean(name = "userInfo") public UserInfo userInfo() throws IOException { return new MyCustomUserInfo(); }Copy to Clipboard Copied! Toggle word wrap Toggle overflow
3.6. Configuring a business application with a MySQL or PostgreSQL database Copia collegamentoCollegamento copiato negli appunti!
Red Hat Process Automation Manager business applications are generated with the default H2 database. You can change the database type to MySQL or PostgreSQL.
Prerequisites
-
You have a
<business-application>.zipfile that you created using the business applications website.
Procedure
-
Unzip the
<business-application>.zipfile and navigate to the<business-application>/business-application-service/src/main/resourcesfolder. -
Open the
application.propertiesfile in a text editor. To configure your business application to use a MySQL database, find the following parameters in the
application.propertiesfile and change the values as shown:Copy to Clipboard Copied! Toggle word wrap Toggle overflow To configure your business application to use a PostgreSQL database, find the following parameters in the
application.propertiesfile and change the values as shown:Copy to Clipboard Copied! Toggle word wrap Toggle overflow -
Save the
application.propertiesfile.
3.7. Configuring business applications for JPA Copia collegamentoCollegamento copiato negli appunti!
The Java Persistence API (JPA) is a standard technology that enables you to map objects to relational databases. You must configure JPA for your Red Hat Process Automation Manager business application.
Prerequisites
-
You have a Red Hat Process Automation Manager
<business-application>.zipfile that you created using the business applications website.
Procedure
-
Unzip the
<business-application>.zipfile and navigate to the<business-application>/<business-application>-service/src/main/resourcesfolder. -
Open the
application.propertiesfile in a text editor. Find the following parameters in the
application.propertiesfile and verify that they have the values shown:spring.jpa.properties.hibernate.dialect=org.hibernate.dialect.H2Dialect spring.jpa.properties.hibernate.show_sql=false spring.jpa.properties.hibernate.hbm2ddl.auto=update spring.jpa.hibernate.naming.physical-strategy=org.hibernate.boot.model.naming.PhysicalNamingStrategyStandardImpl
spring.jpa.properties.hibernate.dialect=org.hibernate.dialect.H2Dialect spring.jpa.properties.hibernate.show_sql=false spring.jpa.properties.hibernate.hbm2ddl.auto=update spring.jpa.hibernate.naming.physical-strategy=org.hibernate.boot.model.naming.PhysicalNamingStrategyStandardImplCopy to Clipboard Copied! Toggle word wrap Toggle overflow If your business application has business automation capabilities, you can add entities to the entity manager factory by adding a comma-separated listed of packages:
spring.jpa.properties.entity-scan-packages=org.jbpm.springboot.samples.entities
spring.jpa.properties.entity-scan-packages=org.jbpm.springboot.samples.entitiesCopy to Clipboard Copied! Toggle word wrap Toggle overflow Business applications with business automation capabilities create an entity manager factory based on the
persistence.xmlfile that comes with Red Hat Process Automation Manager. All entities found in theorg.jbpm.springboot.samples.entitiespackage are automatically added to the entity manager factory and used the same as any other JPA entity in the application.
Additional resources
For more information about configuring JPA, see the Spring Boot Reference Guide.
3.8. Enabling Swagger documentation Copia collegamentoCollegamento copiato negli appunti!
You can enable Swagger-based documentation for all endpoints available in the service project of your Red Hat Process Automation Manager business application.
Prerequisites
-
You have a
<business-application>.zipfile that you created using the business applications website.
Procedure
-
Unzip the
<business-application>.zipfile and navigate to the<business-application>/<business-application>-servicefolder. -
Open the service project
pom.xmlfile in a text editor. Add the following dependencies to the service project
pom.xmlfile and save the file.Copy to Clipboard Copied! Toggle word wrap Toggle overflow To enable the Swagger UI (optional), add the following dependency to the
pom.xmlfile and save the file.<dependency> <groupId>org.webjars</groupId> <artifactId>swagger-ui</artifactId> <version>2.2.10</version> </dependency>
<dependency> <groupId>org.webjars</groupId> <artifactId>swagger-ui</artifactId> <version>2.2.10</version> </dependency>Copy to Clipboard Copied! Toggle word wrap Toggle overflow -
Open the
<business-application>/<business-application>-service/src/main/resources/application.propertiesfile in a text editor. Add the following line to the
application.propertiesfile to enable Swagger support:kieserver.swagger.enabled=true
kieserver.swagger.enabled=trueCopy to Clipboard Copied! Toggle word wrap Toggle overflow
After you start the business application, you can view the Swagger document at http://localhost:8090/rest/swagger.json. The complete set of endpoints is available at http://localhost:8090/rest/api-docs?url=http://localhost:8090/rest/swagger.json.