Simple Webservice in AEM not accessible - Authentication Failure | Community
Skip to main content
S
sud_varun
Level 2
May 30, 2016
Solved

Simple Webservice in AEM not accessible - Authentication Failure

  • May 30, 2016
  • 2 replies
  • 1972 views

Hello,

AEM Version: 6.1

I have a simple SlingServlet which returns a string on /GET at path /bin/getstring

This AEM is hosted at, for example, http://custom-host.com:4502

Now, an external frontend application is not been able to sent GET requests to this service and looking at the network logs, I receive 403 Forbidden.

As I understand, the login-cookie is not created by the external frontend application and hence  403 is thrown. Is there a possibility of a workaround here for an external frontend application to call the AEM based custom servlet?

    This post is no longer active and is closed to new replies. Need help? Start a new post to ask your question.
    Best answer by kautuk_sahni

    Hi

    Add "@Property(name = "sling.auth.requirements", value = "-/bin/mySearchServlet")" This results in the Sling Servlet not requiring authentication. 

    Link:- https://sling.apache.org/documentation/the-sling-engine/authentication/authentication-framework.html (sling.auth.requirements)

    OR

    if you call it from external client (another website or REST client plugin...) CQ security filter will be triggered to prevent your action then return 403 error to remove this please follow these steps:

    1/ http://localhost:4502/system/console/configMgr
    2/ Search for 'Apache Sling Referrer Filter'
    3/ Remove POST method from the filter. Then you can call your POST method anywhere.

     

    Another Reference Links:- https://aem6solutions.wordpress.com/2015/06/19/apache-sling-referrer-filter/

    I hope this would help you.

    Thanks and Regards

    Kautuk Sahni

    2 replies

    smacdonald2008
    smacdonald2008
    Level 10
    May 30, 2016

    see this Article where a Java swing app posts data to an AEM servlet:  http://scottsdigitalcommunity.blogspot.ca/2014/03/creating-java-swing-applications-that.html?m=0. 

    kautuk_sahni
    Community Manager
    kautuk_sahniCommunity ManagerAccepted solution
    Community Manager
    May 30, 2016

    Hi

    Add "@Property(name = "sling.auth.requirements", value = "-/bin/mySearchServlet")" This results in the Sling Servlet not requiring authentication. 

    Link:- https://sling.apache.org/documentation/the-sling-engine/authentication/authentication-framework.html (sling.auth.requirements)

    OR

    if you call it from external client (another website or REST client plugin...) CQ security filter will be triggered to prevent your action then return 403 error to remove this please follow these steps:

    1/ http://localhost:4502/system/console/configMgr
    2/ Search for 'Apache Sling Referrer Filter'
    3/ Remove POST method from the filter. Then you can call your POST method anywhere.

     

    Another Reference Links:- https://aem6solutions.wordpress.com/2015/06/19/apache-sling-referrer-filter/

    I hope this would help you.

    Thanks and Regards

    Kautuk Sahni

    Kautuk Sahni
      Terms & ConditionsAccessibility statement

      Loading footer...