Create an action that will be called by an external service | Community
Skip to main content
O
oliverf82757722
Level 2
September 22, 2020
Solved

Create an action that will be called by an external service

  • September 22, 2020
  • 1 reply
  • 3025 views

I have been asked to explore Project Firefly and various uses of it and I'm struggling to understand how to authenticate this call.

 

I'm only at the very beginning of exploration so I have probably missed something and was hoping someone could point me in the right direction.

I have created a new generic action (eventually this will connect with Adobe Target but just keeping it simple for now). This new action will be invoked by a webhook from a CMS system that we use. When new content is published it will call this action's URL and the action will handle the request. I just don't know how to authenticate the webhook.

In postman I can put in my Bearer token (which I get from `aio login`) but obviously I can't put that into the webhook as it will change over time. How should I go about creating an action that can be authenticated from an external service like this?

The only options I have from our CMS is either a basic auth username/password or values to put into custom headers.

Thanks for any help you can provide.

This post is no longer active and is closed to new replies. Need help? Start a new post to ask your question.
Best answer by Urs_Boller

I would create a service account for your external tool. basically the external tool fetches a new access token (bearer token) before calling the firefly action. read more about service accounts here: https://www.adobe.io/authentication/auth-methods.html#!AdobeDocs/adobeio-auth/master/JWT/JWT.md

1 reply

Urs_Boller
Community Advisor
Urs_BollerCommunity AdvisorAccepted solution
Community Advisor
September 22, 2020

I would create a service account for your external tool. basically the external tool fetches a new access token (bearer token) before calling the firefly action. read more about service accounts here: https://www.adobe.io/authentication/auth-methods.html#!AdobeDocs/adobeio-auth/master/JWT/JWT.md

    D
    Adobe Employee
    duynguyen_adobeAdobe Employee
    Adobe Employee
    September 23, 2020
    @oliverf82757722 - are you passing the JWT access token in the headers when calling the action, or not attaching the token at all and expecting the action to obtain it automatically? For the former, `require-adobe-auth: true` is all you need to do. For the latter, it is insecure because the action then obtains the token on behalf of the calling system. I would recommend you to check out this thread by @urs_boller if you have a similar use case (and recommended solution for it): https://experienceleaguecommunities.adobe.com/t5/project-firefly-questions/adobe-credentials-for-standalone-actions-execution/qaq-p/376236.
    Terms & ConditionsAccessibility statement

    Loading footer...