wso2/carbon-business-process

carbon-business-process

---

Branch	Build Status
master

---

This project contains the modules implementing BPEL , WS-Human Tasks and BPMN support for WSO2 Business Process Server Product. The project structure consist of service-stubs, components and features.

In the service-stubs section, services providing admin service API's and their respective clients are implemented. These are used by the product ui.

In the components section, components corresponding to following functionality are avaialble.

1. BPEL - Apache ode integration layer and UI
2. Human Tasks - Human Tasks engine and respective UI
3. BPMN - Activiti integration layer and UI

In the features section , these individual components are packaged into features as bpel , human tasks and bpmn.

carbon-business-process's Issues

Unsatisfied authrorization while using SOAP services from /bpmn-explorer/ console

Description:
After successful log-in to bpmn-explorer console you can use dashboard, task, monitoring and reports pages but when you select "Processes" menu item you are being logged-out. I tried to analyze this problem and it seems that session is not validated by cookie but it is only validated by Authorization http header in SOAP services used from JS scripts. For example selecting Processes menu item executes getBPMNProcessDiagram method in bpmn-explorer\assets\wsRequest.js script. This method uses "urn:getProcessDiagram" method in "/services/BPMNDeploymentService/" endpoint which subsequently use org.wso2.carbon.server.admin.module.handler.AuthenticationHandler.isAuthenticated method and org.wso2.carbon.core.services.authentication.BasicAccessAuthenticator.canHandle to determine username. Last one checks only Authorization headers returns false. Cookie is not checked anywhere in this route nonetheless it is still provided from JS method as a separate parameter of requestBPS method.

Suggested Labels:
bpmn-explorer,ui,authorization,unauthorized

Suggested Assignees:

Affected Product Version:
EI 6.6.0

OS, DB, other environment details and versions:
Windows, Linux

Steps to reproduce:

1. log in to /bpmn-explorer/ using admin account,
2. select Processes menu item,
3. logged-out

Related Issues: