author 401 error

Question

Below is my code to servletpackage com.***.core.servlets;@Component(service = { Servlet.class })@SlingServletResourceTypes(resourceTypes = "dcp/servlet/assets-locked", methods = HttpConstants.METHOD_GET, extensions = "json")public class DCPLockedAssetsRequestServlet extends SlingSafeMethodsServlet { @Override protected void doGet(SlingHttpServletRequest request, SlingHttpServletResponse response) throws IOException { response.setContentType("application/json"); LOG.info("Forwarding POST request to author instance with Basic Authentication."); CloseableHttpClient httpClient = HttpClients.createDefault(); // Adapt session and validate user Session session = request.getResourceResolver().adaptTo(Session.class); String userId = session.getUserID(); UserManager userManager = request.getResourceResolver().adaptTo(UserManager.class); Map payloadMap = new HashMap(); currentUser = userManager.getAuthorizable(userId); payloadMap.put("assetsPath", assetPath); payloadMap.put("userId", userId); payloadMap.put("userPath", currentUser.getPath().toString()); payloadMap.put("principalName", currentUser.getPrincipal().getName()); String authorServiceURL = techCredentialService.getAuthorServletURL(); // Prepare HTTP POST request to author HttpPost postRequest = new HttpPost(authorServiceURL); token = dcpUpdateUserService.getToken(); postRequest.setHeader("Authorization", "Bearer " + token); postRequest.setHeader(***Constants.CONTENT_TYPE, ***Constants.CONTENT_TYPE_JSON); postRequest.setEntity(new StringEntity(new Gson().toJson(payloadMap))); // Execute the HTTP request org.apache.http.HttpResponse authorResponse = httpClient.execute(postRequest); if (statusCode == 200) { String responseContent = EntityUtils.toString(authorResponse.getEntity()); JsonObject jsonResponse = new JsonObject(); jsonResponse.addProperty(***Constants.STATUS, "success"); jsonResponse.addProperty(***Constants.MESSAGE, "Workflow triggered successfully."); response.getWriter().write(jsonResponse.toString()); }}i am hitting this servlet from publisher,through this servlet when i hit the author path i.e https://author-***-***.adobeaemcloud.com/content/api/***/2025.4/locked-assets-author.jsonit gives us 401 unauthorised from authorwe have used the tech credentials of the techaccount user, through that we are getting access token and providing to it and we have given all the permission to that useron root jcr:All, but its giving 401 then alsoPlease, ASAP can i get the help??

daniel-strmecki · Accepted Answer

Hi @bhavigoyal,I don't see anything wrong with your code example. Sometimes when facing such weird issues it is best to try another option and compare the results.If you have checked all the other options my colleagues suggested, then I suggest you try using a simple POST request to the OTTB POST Servlet. If that is working fine then you can compare the two requests and check what is difference. If it's not working, then we can conclude the issue is not with your code but somewhere on the network/firewall level.import org.apache.sling.api.SlingHttpServletRequest;import org.apache.sling.api.SlingHttpServletResponse;import org.apache.sling.api.servlets.SlingAllMethodsServlet;import org.osgi.service.component.annotations.Component;import org.apache.http.client.methods.HttpPost;import org.apache.http.entity.UrlEncodedFormEntity;import org.apache.http.impl.client.CloseableHttpClient;import org.apache.http.impl.client.HttpClients;import org.apache.http.message.BasicNameValuePair;import javax.servlet.Servlet;import java.io.IOException;import java.util.ArrayList;import java.util.List;@Component( service = Servlet.class, property = { "sling.servlet.paths=/bin/example/updateComponent", "sling.servlet.methods=GET" })public class UpdateComponentPropertyServlet extends SlingAllMethodsServlet { @Override protected void doGet(SlingHttpServletRequest request, SlingHttpServletResponse response) throws IOException { // Path to the component on the Author instance String componentPath = "/content/my-site/en/jcr:content/my-component"; String authorUrl = "https://author.example.com" + componentPath; // Authorization token (use a secure mechanism to retrieve this) String authorizationToken = "Bearer YOUR_TOKEN_HERE"; // HTTP client try (CloseableHttpClient httpClient = HttpClients.createDefault()) { HttpPost postRequest = new HttpPost(authorUrl); // Set headers postRequest.setHeader("Authorization", authorizationToken); postRequest.setHeader("Content-Type", "application/x-www-form-urlencoded"); // Set parameters for the Sling POST servlet List params = new ArrayList<>(); params.add(new BasicNameValuePair("./myProperty", "newValue")); // Update "myProperty" to "newValue" params.add(new BasicNameValuePair(":operation", "modify")); // Required operation for the POST servlet postRequest.setEntity(new UrlEncodedFormEntity(params)); // Execute request httpClient.execute(postRequest); response.getWriter().write("Component property updated successfully."); } catch (Exception e) { response.getWriter().write("Failed to update component property: " + e.getMessage()); } }} In the lack of a better advice, I hope this helps,Daniel

MukeshYadav_ · Answer

Hi @bhavigoyal ,

401 unauthorised error suggest token is expired or not valid(malformed/null).

Either debug or just log the value of token after statement token = dcpUpdateUserService.getToken();

Just make sure in general token have expiration time so hopefully service would be either generating token each time or would be regenerating before token get expired.

Thanks

Sign up

Login with SSO

Login to the community

Login with SSO