Simple Webservice in AEM not accessible - Authentication Failure | Adobe Higher Education
Skip to main content
S
sud_varun
Level 2
May 30, 2016
해결됨

Simple Webservice in AEM not accessible - Authentication Failure

  • May 30, 2016
  • 2 답변들
  • 1972 조회

Hello,

AEM Version: 6.1

I have a simple SlingServlet which returns a string on /GET at path /bin/getstring

This AEM is hosted at, for example, http://custom-host.com:4502

Now, an external frontend application is not been able to sent GET requests to this service and looking at the network logs, I receive 403 Forbidden.

As I understand, the login-cookie is not created by the external frontend application and hence  403 is thrown. Is there a possibility of a workaround here for an external frontend application to call the AEM based custom servlet?

    이 주제는 답변이 닫혔습니다.
    최고의 답변: kautuk_sahni

    Hi

    Add "@Property(name = "sling.auth.requirements", value = "-/bin/mySearchServlet")" This results in the Sling Servlet not requiring authentication. 

    Link:- https://sling.apache.org/documentation/the-sling-engine/authentication/authentication-framework.html (sling.auth.requirements)

    OR

    if you call it from external client (another website or REST client plugin...) CQ security filter will be triggered to prevent your action then return 403 error to remove this please follow these steps:

    1/ http://localhost:4502/system/console/configMgr
    2/ Search for 'Apache Sling Referrer Filter'
    3/ Remove POST method from the filter. Then you can call your POST method anywhere.

     

    Another Reference Links:- https://aem6solutions.wordpress.com/2015/06/19/apache-sling-referrer-filter/

    I hope this would help you.

    Thanks and Regards

    Kautuk Sahni

    2 답변

    smacdonald2008
    smacdonald2008
    Level 10
    May 30, 2016

    see this Article where a Java swing app posts data to an AEM servlet:  http://scottsdigitalcommunity.blogspot.ca/2014/03/creating-java-swing-applications-that.html?m=0. 

    kautuk_sahni
    Community Manager
    kautuk_sahniCommunity Manager답변
    Community Manager
    May 30, 2016

    Hi

    Add "@Property(name = "sling.auth.requirements", value = "-/bin/mySearchServlet")" This results in the Sling Servlet not requiring authentication. 

    Link:- https://sling.apache.org/documentation/the-sling-engine/authentication/authentication-framework.html (sling.auth.requirements)

    OR

    if you call it from external client (another website or REST client plugin...) CQ security filter will be triggered to prevent your action then return 403 error to remove this please follow these steps:

    1/ http://localhost:4502/system/console/configMgr
    2/ Search for 'Apache Sling Referrer Filter'
    3/ Remove POST method from the filter. Then you can call your POST method anywhere.

     

    Another Reference Links:- https://aem6solutions.wordpress.com/2015/06/19/apache-sling-referrer-filter/

    I hope this would help you.

    Thanks and Regards

    Kautuk Sahni

    Kautuk Sahni
      약관 및 조건Accessibility statement

      Loading footer...