Provide restricted access to /bin/querybuilder.json

9 replies
2878 views
Translate

Hi, We need to provide restricted access to AEM's query-builder json API to a 3rd party app. How can we add some sort of authorization/access restriction around this path: /bin/querybuilder.json.

We can't make it publicly accessible for security considerations.

This post is no longer active and is closed to new replies. Need help? Start a new post to ask your question.

arunpatidarAccepted solution

New Participant

with CUG or ACL, it will not work until end user will have session in AEM. I think the best is to achieve from dispatcher.

If you want to do it via AEM session then you can use sling filter to check authentication for this path and return 404 status code or continue the request.

Arun Patidar

arunpatidar

New Participant

Hi,

I think you can enable basic auth at apache server only for this path.

Translate

Arun Patidar

B

beast42Author

Level 3

Thanks for the response @arunpatidar.

Is there any way we can call /bin/querybuilder.json from a sling servlet? I was thinking may be we can have a sling servlet (tied to a resource page) which has some authentication (CUG or ACL)?

Translate

arunpatidarAccepted solution

New Participant

with CUG or ACL, it will not work until end user will have session in AEM. I think the best is to achieve from dispatcher.

If you want to do it via AEM session then you can use sling filter to check authentication for this path and return 404 status code or continue the request.

Translate

Arun Patidar