OTAG token not authenticating REST

Hi,

OTDS 10.5 SP1 Patch 5
Content Server 10.5 Update 2014-12 (version 10.5.0.10)
OpenText AppWorks Gateway v1.1.6

OTAG Reverse Proxy Service

Allowed path patterns = contentserver/api/*
Proxy Mappings = contentserver=enterprise/otcs/cs.exe

I have configured both the Gateway (within the advance settings of the gateway) and CS to use the same OTDS . Through Chrome I've successfully authenticated via the webaccess page and accessed my application. When I try and send a REST request via the app I receive a 401 unauthorized error message. The otagtoken is included in the request, however authentication is failing.

Request Headers

POST /contentserver/api/v1/nodes/2596637/versions HTTP/1.1
Host: enterprise:8090
Connection: keep-alive
Content-Length: 7122
Accept: application/json, text/plain, /
Origin: http://enterprise:8090
otagtoken: 0f0ea57d-123b-4526-bf82-4f8a7cbf2ad3
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2272.101 Safari/537.36
Content-Type: application/x-www-form-urlencoded
Referer: http://enterprise:8090/myApp
Accept-Encoding: gzip, deflate
Accept-Language: en-GB,en-US;q=0.8,en;q=0.6
Cookie: JSESSIONID=6FF8CCBCE0AF30EF778F6B71A592F143; cv_page=Department; JSESSIONID=55ED6A04A694DA819E5F9A03FCA56201; otagtoken=0f0ea57d-123b-4526-bf82-4f8a7cbf2ad3; accessToken=9a0674661c2f506f2655111c61f4f60f; LLCookie=L6xqK%2FjI%2FExV%2FZLQ6lBHTg%3D%3D

Response Headers

HTTP/1.1 401 Unauthorized
Cache-Control: no-cache, no-store, must-revalidate, max-age=0
Pragma: no-cache
Expires: 0
Server: Microsoft-IIS/7.5
Access-Control-Allow-Origin: http://enterprise:8090
Access-Control-Allow-Headers: OTCSTicket, OTDSTicket, MYSAPSSO2, Authorization, Content-Type, Content-Length
Access-Control-Allow-Methods: GET, POST, PUT, DELETE, OPTIONS
Access-Control-Expose-Headers: OTCSTicket, Content-Type
Access-Control-Max-Age: 86400
Status: 401 Unauthorized
X-Powered-By: ASP.NET
Date: Thu, 02 Apr 2015 16:15:46 GMT
via: HTTP/1.1 Enterprise
Content-Type: application/json;charset=UTF-8
Transfer-Encoding: chunked

Any advice on what may be the cause and the subsequent solution is appreciated.
Thanks

Find more posts tagged with

API

AppWorks Gateway

Comments

Jason_Ibrahim

can you share the javascript code where you are making the call?

Ferdinand Prantl

I cannot see any request header supported by the CS to authorize the access in your sample. It is not otagtoken, unless you have some module which recognizes it. The CS 10.5 supports OTCSTicket (returned by CS REST API /api/v1/auth or decoded LLCookie) and Authorization (Basic Authentication) out-of-the-box; if you use OTDS, then OTDSTicket (from the OTDS connected with the CS) too.

You should obtain the OTDSTicket from AppWorks and set it as the request header with this name when calling the CS REST API.

Gareth Newell

If I include the OTCSTICKET in the header with its value set using LLCookie then I am able to authenticate. From the looks of it my OTAG isn't configured correctly to use OTDS therefore I can't rerieve the OTDSTicket.