First of all, THANK YOU, Francesco, for a fast reply!

ilgrosso wrote
> 
> vladz wrote
>> 1.  (POST /users/self)  When I execute it from the browser, I invariably
>> receive CODE 403 with message "Access to the specified resource has been
>> forbidden."
> Question: what is the value of the 'selfRegistration.allowed' 
> configuration parameter [1] in your Syncope deployment? (You can find it 
> out from Admin Console under Configuration > Parameters).
> E.g. was self-registration enabled at all?

Indeed, as far as I can see the "selfRegistration.allowed" flag was left at
its default TRUE value.  I was aware of it and checked in the
syncope-console Parameters section first.


ilgrosso wrote
> When enabled, the "POST /users/self" endpoint requires to be invoked 
> anonymously, e.g. without any 'Authorization' HTTP header.
> Are you sure that you did not populate the username / password fields in 
> the Swagger UI when attempting the "POST /users/self" invocation?

Regarding user/pass, the fields on top of the SwaggerUI were filled out with
values.  I have removed them and tried POST again with the same 403 error.

Looking at the actual request headers, there is an Authorization Basic hash
value set for the self request.  I wonder how it gets there and shouldn't
the SwaggerUI know to remove it?  That was a GOOD POINTER!

Thanks again, 


- vlad

--
View this message in context: 
http://syncope-user.1051894.n5.nabble.com/Self-Registration-help-tp5709077p5709079.html
Sent from the syncope-user mailing list archive at Nabble.com.

Reply via email to