How to add authentication?

[sap-samples]

How to add authentication?

[indusankar89]

Hi Manju,
You can follow the steps in the tutorial https://developers.sap.com/tutorials/s4sdk-secure-cloudfoundry.html for all steps except step 3. instead of step 3, can you try to add

<dependency>
	<groupId>com.sap.cloud.security.xsuaa</groupId>
	<artifactId>xsuaa-spring-boot-starter</artifactId>
	<version>2.3.2</version>
</dependency>

and add the file: https://github.com/SAP-samples/cloud-espm-cloud-native/blob/master/product-service/src/main/java/com/sap/refapps/espm/config/AppSecurityConfig.java
to the objectStore projects config folder - https://github.com/SAP-samples/cloud-objectstore-java-sample/tree/master/src/main/java/com/sap/refapps/objectstore/config

[manjunathgudisi]

Thank you @indusankar89 I will follow the steps and let you know the status. Thank you for your help.

[sathisha-bettegowda]

Gettting this error while building the app after following the steps...
[47,39] cannot find symbol
[ERROR] symbol: method oauth2ResourceServer()
[ERROR] location: class org.springframework.security.config.annotation.web.builders.HttpSecurity

[indusankar89]

Hi @sathisha-bettegowda when did you get the above error? during build/deploy?
I tried to build and deploy by adding the mentioned dependency and file and it was successful..

[sathisha-bettegowda]

thanks @indusankar89
modifying this helped

<parent>
	<groupId>org.springframework.boot</groupId>
	<artifactId>spring-boot-starter-parent</artifactId>
	<version>2.2.4.RELEASE</version>
	<relativePath /> <!-- lookup parent from repository -->
</parent>

[sathisha-bettegowda]

@indusankar89
After deploying the app router, we are getting unauthorized error, when we are trying to post anything to object,
Below are the sample of GET and POST request.
Could you please help us to understand what we are missing here,

Also in the xs-seurity.json, scope is limited to viewing.
"scopes": [
{
"name": "$XSAPPNAME.Display",
"description": "display"
}
],
"role-templates": [
{
"name": "Viewer",
"description": "Required to view things in our solution",
"scope-references" : [
"$XSAPPNAME.Display"
]
}
does this affect uploading/deleting files from object store?

[manjunathgudisi]

Hi @indusankar89
Could please help us above.