"InsufficientAuthenticationException: Full authentication is required " when try to access custom extension base on ywebservices

[Former Member]

Have created a custom based extension based on ywebservice, while trying the acess the same with url http://localhost:9001/{yourextensionname}/sample/dto

getiing the below exception

INFO | jvm 1 | main | 2019/01/10 16:12:06.632 | ERROR [hybrisHTTP29] [Usb2cExceptionConverter] Handling WebService Exception - UnauthorizedException - Full authentication is required to access this resource INFO | jvm 1 | main | 2019/01/10 16:12:06.635 | org.springframework.security.oauth2.provider.error.DefaultWebResponseExceptionTranslator$UnauthorizedException: Full authentication is required to access this resource INFO | jvm 1 | main | 2019/01/10 16:12:06.635 | at org.springframework.security.oauth2.provider.error.DefaultWebResponseExceptionTranslator.translate(DefaultWebResponseExceptionTranslator.java:54) ~[spring-security-oauth2-2.2.0.RELEASE.jar:?] INFO | jvm 1 | main | 2019/01/10 16:12:06.635 | at org.springframework.security.oauth2.provider.error.AbstractOAuth2SecurityExceptionHandler.doHandle(AbstractOAuth2SecurityExceptionHandler.java:59) [spring-security-oauth2-2.2.0.RELEASE.jar:?] INFO | jvm 1 | main | 2019/01/10 16:12:06.636 | at org.springframework.security.oauth2.provider.error.OAuth2AuthenticationEntryPoint.commence(OAuth2AuthenticationEntryPoint.java:54) [spring-security-oauth2-2.2.0.RELEASE.jar:?] INFO | jvm 1 | main | 2019/01/10 16:12:06.636 | at org.springframework.security.web.access.ExceptionTranslationFilter.sendStartAuthentication(ExceptionTranslationFilter.java:203) [spring-security-web-4.2.6.RELEASE.jar:4.2.6.RELEASE] INFO | jvm 1 | main | 2019/01/10 16:12:06.637 | at org.springframework.security.web.access.ExceptionTranslationFilter.handleSpringSecurityException(ExceptionTranslationFilter.java:177) [spring-security-web-4.2.6.RELEASE.jar:4.2.6.RELEASE] INFO | jvm 1 | main | 2019/01/10 16:12:06.637 | at org.springframework.security.web.access.ExceptionTranslationFilter.doFilter(ExceptionTranslationFilter.java:133) [spring-security-web-4.2.6.RELEASE.jar:4.2.6.RELEASE] INFO | jvm 1 | main | 2019/01/10 16:12:06.637 | at org.springframework.security.web.FilterChainProxy$VirtualFilterChain.doFilter(FilterChainProxy.java:331) [spring-security-web-4.2.6.RELEASE.jar:4.2.6.RELEASE] INFO | jvm 1 | main | 2019/01/10 16:12:06.638 | at org.springframework.security.web.session.SessionManagementFilter.doFilter(SessionManagementFilter.java:137) [spring-security-web-4.2.6.RELEASE.jar:4.2.6.RELEASE] INFO | jvm 1 | main | 2019/01/10 16:12:06.638 | at org.springframework.security.web.FilterChainProxy$VirtualFilterChain.doFilter(FilterChainProxy.java:331) [spring-security-web-4.2.6.RELEASE.jar:4.2.6.RELEASE] INFO | jvm 1 | main | 2019/01/10 16:12:06.639 | at org.springframework.security.web.authentication.AnonymousAuthenticationFilter.doFilter(AnonymousAuthenticationFilter.java:111) [spring-security-web-4.2.6.RELEASE.jar:4.2.6.RELEASE] INFO | jvm 1 | main | 2019/01/10 16:12:06.639 | at org.springframework.security.web.FilterChainProxy$VirtualFilterChain.doFilter(FilterChainProxy.java:331) [spring-security-web-4.2.6.RELEASE.jar:4.2.6.RELEASE] INFO | jvm 1 | main | 2019/01/10 16:12:06.640 | at org.springframework.security.web.servletapi.SecurityContextHolderAwareRequestFilter.doFilter(SecurityContextHolderAwareRequestFilter.java:170) [spring-security-web-4.2.6.RELEASE.jar:4.2.6.RELEASE] INFO | jvm 1 | main | 2019/01/10 16:12:06.640 | at org.springframework.security.web.FilterChainProxy$VirtualFilterChain.doFilter(FilterChainProxy.java:331) [spring-security-web-4.2.6.RELEASE.jar:4.2.6.RELEASE] INFO | jvm 1 | main | 2019/01/10 16:12:06.641 | at org.springframework.security.web.savedrequest.RequestCacheAwareFilter.doFilter(RequestCacheAwareFilter.java:63) [spring-security-web-4.2.6.RELEASE.jar:4.2.6.RELEASE] INFO | jvm 1 | main | 2019/01/10 16:12:06.641 | at org.springframework.security.web.FilterChainProxy$VirtualFilterChain.doFilter(FilterChainProxy.java:331) [spring-security-web-4.2.6.RELEASE.jar:4.2.6.RELEASE] INFO | jvm 1 | main | 2019/01/10 16:12:06.642 | at org.springframework.security.oauth2.provider.authentication.OAuth2AuthenticationProcessingFilter.doFilter(OAuth2AuthenticationProcessingFilter.java:176) [spring-security-oauth2-2.2.0.RELEASE.jar:?] INFO | jvm 1 | main | 2019/01/10 16:12:06.646 | at org.springframework.security.web.FilterChainProxy$VirtualFilterChain.doFilter(FilterChainProxy.java:331) [spring-security-web-4.2.6.RELEASE.jar:4.2.6.RELEASE] INFO | jvm 1 | main | 2019/01/10 16:12:06.646 | at org.springframework.security.web.header.HeaderWriterFilter.doFilterInternal(HeaderWriterFilter.java:66) [spring-security-web-4.2.6.RELEASE.jar:4.2.6.RELEASE] INFO | jvm 1 | main | 2019/01/10 16:12:06.647 | at org.springframework.web.filter.OncePerRequestFilter.doFilter(OncePerRequestFilter.java:107) [spring-web-4.3.17.RELEASE.jar:4.3.17.RELEASE] INFO | jvm 1 | main | 2019/01/10 16:12:06.647 | at org.springframework.security.web.FilterChainProxy$VirtualFilterChain.doFilter(FilterChainProxy.java:331) [spring-security-web-4.2.6.RELEASE.jar:4.2.6.RELEASE] INFO | jvm 1 | main | 2019/01/10 16:12:06.647 | at org.springframework.security.web.context.request.async.WebAsyncManagerIntegrationFilter.doFilterInternal(WebAsyncManagerIntegrationFilter.java:56) [spring-security-web-4.2.6.RELEASE.jar:4.2.6.RELEASE] INFO | jvm 1 | main | 2019/01/10 16:12:06.647 | at org.springframework.web.filter.OncePerRequestFilter.doFilter(OncePerRequestFilter.java:107) [spring-web-4.3.17.RELEASE.jar:4.3.17.RELEASE] INFO | jvm 1 | main | 2019/01/10 16:12:06.648 | at org.springframework.security.web.FilterChainProxy$VirtualFilterChain.doFilter(FilterChainProxy.java:331) [spring-security-web-4.2.6.RELEASE.jar:4.2.6.RELEASE] INFO | jvm 1 | main | 2019/01/10 16:12:06.648 | at org.springframework.security.web.context.SecurityContextPersistenceFilter.doFilter(SecurityContextPersistenceFilter.java:105) [spring-security-web-4.2.6.RELEASE.jar:4.2.6.RELEASE] INFO | jvm 1 | main | 2019/01/10 16:12:06.649 | at org.springframework.security.web.FilterChainProxy$VirtualFilterChain.doFilter(FilterChainProxy.java:331) [spring-security-web-4.2.6.RELEASE.jar:4.2.6.RELEASE] INFO | jvm 1 | main | 2019/01/10 16:12:06.650 | at org.springframework.security.web.access.channel.ChannelProcessingFilter.doFilter(ChannelProcessingFilter.java:157) [spring-security-web-4.2.6.RELEASE.jar:4.2.6.RELEASE] INFO | jvm 1 | main | 2019/01/10 16:12:06.650 | at org.springframework.security.web.FilterChainProxy$VirtualFilterChain.doFilter(FilterChainProxy.java:331) [spring-security-web-4.2.6.RELEASE.jar:4.2.6.RELEASE] INFO | jvm 1 | main | 2019/01/10 16:12:06.650 | at org.springframework.security.web.FilterChainProxy.doFilterInternal(FilterChainProxy.java:214) [spring-security-web-4.2.6.RELEASE.jar:4.2.6.RELEASE] INFO | jvm 1 | main | 2019/01/10 16:12:06.650 | at org.springframework.security.web.FilterChainProxy.doFilter(FilterChainProxy.java:177) [spring-security-web-4.2.6.RELEASE.jar:4.2.6.RELEASE] INFO | jvm 1 | main | 2019/01/10 16:12:06.651 | at de.hybris.platform.servicelayer.web.AbstractPlatformFilterChain$InternalFilterChain.doFilter(AbstractPlatformFilterChain.java:300) [coreserver.jar:?] INFO | jvm 1 | main | 2019/01/10 16:12:06.651 | at de.hybris.platform.webservicescommons.filter.RestSessionFilter.doFilter(RestSessionFilter.java:46) [webservicescommonsserver.jar:?] INFO | jvm 1 | main | 2019/01/10 16:12:06.652 | at de.hybris.platform.servicelayer.web.AbstractPlatformFilterChain$InternalFilterChain.doFilter(AbstractPlatformFilterChain.java:300) [coreserver.jar:?] INFO | jvm 1 | main | 2019/01/10 16:12:06.652 | at de.hybris.platform.servicelayer.web.TenantActivationFilter.doFilter(TenantActivationFilter.java:88) [coreserver.jar:?] INFO | jvm 1 | main | 2019/01/10 16:12:06.652 | at de.hybris.platform.servicelayer.web.AbstractPlatformFilterChain$InternalFilterChain.doFilter(AbstractPlatformFilterChain.java:300) [coreserver.jar:?] INFO | jvm 1 | main | 2019/01/10 16:12:06.653 | at de.hybris.platform.servicelayer.web.Log4JFilter.doFilter(Log4JFilter.java:44) [coreserver.jar:?] INFO | jvm 1 | main | 2019/01/10 16:12:06.653 | at de.hybris.platform.servicelayer.web.AbstractPlatformFilterChain$InternalFilterChain.doFilter(AbstractPlatformFilterChain.java:300) [coreserver.jar:?] INFO | jvm 1 | main | 2019/01/10 16:12:06.653 | at de.hybris.platform.servicelayer.web.AbstractPlatformFilterChain.processStandardFilterChain(AbstractPlatformFilterChain.java:209) [coreserver.jar:?] INFO | jvm 1 | main | 2019/01/10 16:12:06.654 | at

[arvind-kumar_avinash]

You need an access token. Please follow the steps given below to get the access token to test web services (based on Hybris v6.7 B2C setup):

• Create a user, say testuser@test.com/Abcd1234

• Go to backoffice>OAuth Clients>mobile_android>Client secret

• Set a password as ‘secret’ and SAVE

• Use postman to POST (not GET) https://localhost:9002/authorizationserver/oauth/token?client_id=mobile_android&client_secret=secret...

• Note the access token from the response e.g. I got the following response

  { "access_token": "2473f074-95c6-4b54-adb5-fe37e64c6b32", "token_type": "bearer", "refresh_token": "2bb416a7-02fb-4d3b-a96c-7a9b8bc98821", "expires_in": 43198, "scope": "basic openid" }

• Set the access token (the one obtained in the step mentioned above) into a REST client e.g Postman

• Fire a GET request https://localhost:9002/rest/v2/electronics/products/489702

Test more from https://help.hybris.com/1808/hcd/8b9e95cf866910148348c3bcab4be0b6.html

Reference to setup OAuth Clients: https://help.hybris.com/1808/hcd/627c92db29ce4fce8b01ffbe478a8b3b.html#loio6faa241f2dac445093b0cd029...

[pavel-novikov]

Thank you! I tried to connect with my new extension, and had some problems, and did't understand why, it was not work, your example, was opened my eyes. Thanks Thanks Thanks!)