Hi Everybody, Yesterday we encounted an incident in our Appian 6.6.1 applic

felixl over 11 years ago

Hi Everybody,
Yesterday we encounted an incident in our Appian 6.6.1 application when using the Send HTTP Request plugin. We use the service to get information from a REST Webservice. The REST service requires user credentials which we have supplied in the Send HTTP Request parameters. During the incident 30 - 50% or our requests were returning with a Unauthorized [401] error which we were not expecting because the service was given the correct user credentials.

We didn't have debug logging turned on so we don't have debug logs from the Send HTTP Request service. Are there any ways to determin if user credentials were correctly passed into the activity class?

To protect the password used in the process we encrypt it when we retrieve it from our database and decrypt it into the service input parameter. Is it possible that using the function 'passworddecrypt' in the smart service could have failed? This is harder for us to determine because the pass...

Discussion posts and replies are publicly visible

Parents

0 felixl over 11 years ago

...word field is not required so it would not throw an exception if the value was blank.

We also tried hand coding the password into the process instance and we still received the Unauthorized error.

With a few restart attempts, the HTTP Request service will meet our expectation, and this is with only restarting the node, we did not have to update any of the input parameters.

Without logging of the http requests sent from the service it is difficult to analyze against the REST webservice because it receives requests from many sources.

To summarise:
Is it possible for input parameters to not be passed into the Send HTTP Request activity?
Could the passworddecrypt function fail and return unexpected results?
Is there a log that tracks HTTP requests that are sent from the service?

Thanks
Felix
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel

Reply

0 felixl over 11 years ago

...word field is not required so it would not throw an exception if the value was blank.

We also tried hand coding the password into the process instance and we still received the Unauthorized error.

With a few restart attempts, the HTTP Request service will meet our expectation, and this is with only restarting the node, we did not have to update any of the input parameters.

Without logging of the http requests sent from the service it is difficult to analyze against the REST webservice because it receives requests from many sources.

To summarise:
Is it possible for input parameters to not be passed into the Send HTTP Request activity?
Could the passworddecrypt function fail and return unexpected results?
Is there a log that tracks HTTP requests that are sent from the service?

Thanks
Felix
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel

Children

No Data