Web Service RESTful API user authentication via windows authentication

[lisardl]

Hi,

I'm currently developing a RESTful API via LabView 2018. Since users are going to have access to an important database I need to have an user authentication where every user has different access privileges. 

The best solution I can picture right now is the model JIRA uses, where the login data is just the same as the one from Windows. Therefore I'd need to check the header information in the web service VIs. Does anyone know if that's possible? And if yes, how? (Why is there no "read header" in the web service VIs?)

Are there other possible solutions? (The API is going to have approx. 1000 users.)

Thank you in advance and best regards,

Lisa

[lisardl]

Hi, 

it's a while ago that you wrote this but maybe you or somebody else can help me... 

I am currently dealing with the exact same problem and unfortunately I have no clue how to develop a proxy server and I don't even know how to start...

Thanks in advance and best regards,

Lisa

[JGoebel]

Hi Lisa,

this is Jan Göbel from NI Technical Support.

I also wonder why its not possible to retrieve the header information of an incoming request, I couldnt find a VI for that either.

Still I think there's a different way to achieve what you want, please have a look at this tutorial:

https://knowledge.ni.com/KnowledgeArticleDetails?id=kA00Z0000019LgPSAU&l=de-DE

If you don't want to manage the Permissions statically in the Webservice Configuration Page, it should also work to set the Webservice Method to not require specific permissions, but instead use the "Get Auth Details.vi" from the Webservice Palette to retrieve the Authentification Data and then decide inside the method if the user has adequate permissions.

I hope this helps you out, if you have further questions or if I got your question wrong, just let me know!

Best,
Jan Göbel

Staff Applications Engineer