Skip to Main Content

Integration

Announcement

For appeals, questions and feedback about Oracle Forums, please email oracle-forums-moderators_us@oracle.com. Technical questions should be asked in the appropriate category. Thank you!

OSB HTTP basic authorization (reactive / pre-emptive)fails with 401

user11687940Jun 15 2016 — edited Jun 15 2016

Hi,

Use case: Trying to connect to the HTTPS endpoint which has basic Authentication enabled.


For HTTP basic authorization , does OSB HTTP business service have any setting for reactive authorization  and pre-emptive authorization?

What is Reactive:

The client makes a request for a resource which needs authentication;

The server returns an HTTP 401 Authorization required response (indicating the authentication scheme and realm) with WWW-Authenticate header.

The client re-submits the request with an Authentication header;

The server verifies client credentials and returns the resource if authenticated successfully..

what is Preemptive:

The client can preemptively pass the credentials on the first request. The server returns immediately the resource if authenticated successfully.

Done so far:

In my business service, providing Service account with necessary details user name and password.

1) Business service fails with 401 error.

2) We we try from basic SOAP UI with same details , request goes through to end point.

3) With Apache HTTP client along with pre-emptive basic auth enabled , it works

4) I can see pre-emptive basic auth in SOA BPEL "http://www.albinsblog.com/2014/04/oraclewebservicespreemptivebasicauth.html".

5) We have done "-Dcom.bea.wli.sb.transports.http.GetHttpAuthorizationHeaderAllowed=true as per ""http://www.hkmconsultingllc.com/blog/oracle/getting-authorization-header-osb/": It didn't worked.

How to deal with this scenario from OSB?

Thanks,

Comments
Locked Post
New comments cannot be posted to this locked post.
Post Details
Locked on Jul 13 2016
Added on Jun 15 2016
0 comments
891 views