xmlservice icon indicating copy to clipboard operation
xmlservice copied to clipboard

Connection to XMLSERVICE via OAuth credentials

Open tomcphr opened this issue 1 year ago • 1 comments

Hi there

I'm working on an web app that wants to call the XMLSERVICE to call RPG programs etc.

However, I don't want to store the AS400 user credentials in memory or on a database somewhere for security reasons

Is it possible to use OAuth with the XMLSERVICE?

So basically we can get a user to login once with their AS400 access and provide back a token to store and then use when accessing the XMLSERVICE

Cheers

tomcphr avatar May 10 '24 10:05 tomcphr

There are a variety of ways to use XMLSERVICE and most of them don't have any authentication within XMLSERVICE itself. While there is a way to use it via CGI in Apache, nowadays it's usually recommended to use it through the SQL stored procedures through a database connection or via xmlservice-cli command over SSH, however neither of those methods support OAuth.

Because XMLSERVICE is just a set of APIs, It's entirely feasible to build any sort of authentication method around XMLSERVICE but AFAIK there's no pre-built solution for what you're asking for.

kadler avatar May 10 '24 13:05 kadler