Hello Everyone,
I’m working to receive data form an ERP (Ms Dynamics) the other partner will send me data with a POST on my HTTP Server Input.
I want to secures this transaction because the data pass over the Internet. I have a SSL certificate on my PlanetPress Workflow.
Is it possible to create api key / secret or something like that? Encryption auth?
What is the best practice or recommendation for that?
Thank you
If you have an SSL certificate on the server, then the client will be sending data through HTTPS, which means the data is encrypted by default over the wire.
So as far as encryption is concerned, you are covered.
Hello Phil
Thank you for your answer.
But If I create a new route with a HTTP Server input. Wide open over the web. Anybody can make request to it? How secure this request?
Do I create a text condition in my workflow to delete the request?
Thank you
An API Key with a secret would be a good way to filter out the requests. And yes, you will have to adapt your Workflow process to ignore any request that doesn’t include the appropriate API key. But that means you are exposing Workflow to DDOS attacks.
Please understand that Workflow is not a web server, nor does it implement basic security measures. The fact that it is able to respond to HTTP(s) requests must not lure you into thinking otherwise.
If you decide to leave Workflow on the open Web, you are exposing a critical piece of software to potential hackers. I strongly urge you to use a firewall or a reverse proxy to filter out any request before it reaches Workflow.
Hello Phil,
I understand! I will give attention to that.
Thank you very much.