Many REST service integration use cases require complex combinations of authentication methods.

One example endpoint requires:
* Getting a JWT from the webservice requires basic authentication
* To query for other data requires anonymous authentication with the "Authorize:Bearer <token>" header
* The JWT needs to be renewed every hour

Currently, the REST driver only handles ONE auth method at a time only, and is only configurable as driver properties.
Adding flexibility to let auth methods/configuration be controllable via driver operation-data, would allow for a policy managed setup, making it a lot more flexible and allow for more complex use cases.

(For Micro Focus: ServiceRequestID 101259295481)

Comments

  • The SOAP web service to CHRIS 21 HR system requires tokens with an expiry time.
    The Rapid Global Rapid Access platform has a REST web service and also requires authentication tokens with an expiry. Support for token expiry is required for both the SOAP and REST drivers.