search

IBM / xmlservice

XML-based interface for accessing IBM i resources
https://xmlservice.readthedocs.io/
BSD 3-Clause "New" or "Revised" License
35 stars 18 forks source link

Connection to XMLSERVICE via OAuth credentials #68

Open tomcphr opened 6 months ago

tomcphr commented 6 months ago

Hi there

I'm working on an web app that wants to call the XMLSERVICE to call RPG programs etc.

However, I don't want to store the AS400 user credentials in memory or on a database somewhere for security reasons

Is it possible to use OAuth with the XMLSERVICE?

So basically we can get a user to login once with their AS400 access and provide back a token to store and then use when accessing the XMLSERVICE

Cheers

kadler commented 6 months ago

There are a variety of ways to use XMLSERVICE and most of them don't have any authentication within XMLSERVICE itself. While there is a way to use it via CGI in Apache, nowadays it's usually recommended to use it through the SQL stored procedures through a database connection or via xmlservice-cli command over SSH, however neither of those methods support OAuth.

Because XMLSERVICE is just a set of APIs, It's entirely feasible to build any sort of authentication method around XMLSERVICE but AFAIK there's no pre-built solution for what you're asking for.