SAP UI5 Application to Pass User ID on headers to external API through destination

[vinoth_sukumar]

Hi,

I'm looking to call an external API from a UI5 application in BTP and the requirement is to pass the user ID to the headers/query parameters or body of the API.

But, we need to make this user ID being passed without being visible in the console of the browser.

API works based on basic authentication which is configured on the destination.

Is there a way to achieve this?

I'm wondering if any additional properties in the destination could help to pass the user Id or email to the API, that way front-end app or the browser won't know about the details.

Please share.

Thanks,

Vinoth

[gregorw]

Are you using standalone or managed approuter to serve the application?

[vinoth_sukumar]

Hi Gregor,

It is a standalone application.

Thanks,

Vinoth

[shahidkakkat]

Hi Vinoth,

I am also trying to send user ID to external API,Can you please let me know how you solved this ?

Thanks

[quovadis]

Hello vinoth.sukumar ,

You might want to have a look at the following blogposts of mine, especially that you rely on the SAP managed approuter as I do:

• https://blogs.sap.com/2023/10/18/sap-btp-kyma-api-rules-with-destinations-and-a-managed-approuter./
• https://blogs.sap.com/2023/03/20/destinations-routing-easy-with-sap-build-work-zone-standard-edition...

Long story short you can have all the things like the user id embedded in the JWT token being passed in the Authorization header of your API.

I hope that helps; Piotr

[gregorw]

Can you point to the section where you describe this case? Haven't found it.

[quovadis]

Here you go Greg: https://blogs.sap.com/2023/03/20/destinations-routing-easy-with-sap-build-work-zone-standard-edition...

[vinoth_sukumar]

Hi Piotr,

Thanks for sharing, It was helpful to understand Kyma, but we don't have Kyma in our environment, anything similar is possible with CF?

Thanks,

Vinoth

[quovadis]

Hello, as you are relying on a managed approuter please refer to the sap approuter help:

https://help.sap.com/docs/btp/sap-business-technology-platform/managed-application-router

https://help.sap.com/docs/build-work-zone-standard-edition/sap-build-work-zone-standard-edition/run-...

https://help.sap.com/docs/build-work-zone-standard-edition/sap-build-work-zone-standard-edition/run-...

I hope that helps;

[gregorw]

Hi Piotr,

Vinoth was asking for:

"pass the user ID to the headers/query parameters or body of the API."

You suggest that the backend app should evaluate the JWT or?

CU
Gregor

[quovadis]

Hi Gregor, indeed the backend application should be relying on a JWT token (passed to it in the Authorization header); Thx; Piotr

[gregorw]

As you can't extend managed Approuter you have you either use SAP API Management, Cloud Integration or a custom CAP application to achieve this requirement.

[vinoth_sukumar]

Hi Gregor,

Thanks, I think adding another layer as you mentioned is the only way to achieve this, or perhaps another option is to consider enabling principal propagation authentication with the back end service, as our external API is connected via cloud connector, any thoughts?

I was hoping to send dynamic values from the additional properties to header or query parameters, Additional parameter "sap.query" in destination has no effect | SAP Community. Is it possible to send dynamic values to headers?

Thanks,

Vinoth

[gregorw]

Based on the documentation of approuter - Destination service only:

URL.headers.<header-name>

and not:

URL.query.<header-name>

which seems to be only supported by SAP Cloud SDK.

[gregorw]

Then you should check the documentation: Extending Application Router

[vinoth_sukumar]

Hi Gregor,

Apologies, we are using Managed App router for HTML5 applications, which are accessed from work zone standard edition tiles.

Regards,

Vinoth