<div dir="ltr"><div><div>Hi Paul.<br><br></div>Which release of apiman are you using? Can you also attach a screenshot of the Gateway as you are creating it? <br><br></div>Thanks!<br></div><div class="gmail_extra"><br><div class="gmail_quote">On Tue, Jan 5, 2016 at 11:50 AM, Paul Blair <span dir="ltr">&lt;<a href="mailto:pblair@clearme.com" target="_blank">pblair@clearme.com</a>&gt;</span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">



<div style="word-wrap:break-word">
<div style="font-family:Calibri,sans-serif;font-size:14px;color:rgb(0,0,0)">
I&#39;m setting up a new gateway in apiman. I put in the wrong password for the configuration endpoint credentials, and this is what I got on the &quot;New Gateway&quot; screen:</div>
<div style="font-family:Calibri,sans-serif;font-size:14px;color:rgb(0,0,0)">
<br>
</div>
<div style="color:rgb(0,0,0)"><strong>Gateway Configuration Invalid</strong>
<div>Something has gone wrong when testing the Gateway. Hopefully the details (below) will help you figure out what.</div>
</div>
<div>
<blockquote style="font-family:Calibri,sans-serif;font-size:14px;margin:0px 0px 0px 40px;border:none;padding:0px">
<div style="color:rgb(0,0,0)"></div>
</blockquote>
<div style="margin-top:8px">
<pre style="font-family:Calibri,sans-serif;font-size:14px">{&quot;data&quot;:&quot;&lt;html&gt;&lt;head&gt;&lt;title&gt;Error&lt;/title&gt;&lt;/head&gt;&lt;body&gt;Unauthorized&lt;/body&gt;&lt;/html&gt;&quot;,&quot;status&quot;:401,&quot;config&quot;:{&quot;method&quot;:&quot;PUT&quot;,&quot;transformRequest&quot;:[null],&quot;transformResponse&quot;:[null],&quot;data&quot;:{&quot;name&quot;:&quot;The Gateway&quot;,&quot;description&quot;:&quot;Gateway to back-end services&quot;,&quot;configuration&quot;:&quot;{\&quot;endpoint\&quot;:\&quot;https://[GATEWAY_URI]/apiman-gateway-api/\&quot;,\&quot;username\&quot;:\&quot;apimanager\&quot;,\<b><font color="#ff2600">&quot;password\&quot;:\&quot;api-manager$65454\&quot;</font></b>}&quot;,&quot;type&quot;:&quot;REST&quot;},&quot;url&quot;:&quot;https://[APIMAN_URI]/apiman/gateways&quot;,&quot;headers&quot;:{&quot;Accept&quot;:&quot;application/json, text/plain, */*&quot;,&quot;Content-Type&quot;:&quot;application/json;charset=utf-8&quot;,&quot;Authorization&quot;:&quot;Bearer [TOKEN]&quot;}},&quot;statusText&quot;:&quot;Unauthorized&quot;}</pre>
<pre><font face="Calibri">Granted that only a mistaken password is shown, this still doesn&#39;t seem secure, and also makes me wonder if the credential may be exposed in other similar places. Should I raise an issue on this?</font></pre>
<pre style="font-family:Calibri,sans-serif;font-size:14px"><br></pre>
</div>
</div>
</div>

<br>_______________________________________________<br>
Apiman-user mailing list<br>
<a href="mailto:Apiman-user@lists.jboss.org">Apiman-user@lists.jboss.org</a><br>
<a href="https://lists.jboss.org/mailman/listinfo/apiman-user" rel="noreferrer" target="_blank">https://lists.jboss.org/mailman/listinfo/apiman-user</a><br>
<br></blockquote></div><br><br clear="all"><br>-- <br><div class="gmail_signature"><div dir="ltr"><div><div dir="ltr">Len DiMaggio (<a href="mailto:ldimaggi@redhat.com" target="_blank">ldimaggi@redhat.com</a>)<br>JBoss by Red Hat<br>314 Littleton Road<br>Westford, MA 01886  USA<br>tel:  978.392.3179<br>cell: 781.472.9912<br><a href="http://www.redhat.com" target="_blank">http://www.redhat.com</a><br><a href="http://community.jboss.org/people/ldimaggio" target="_blank">http://community.jboss.org/people/ldimaggio</a><br><br><img src="http://www.redhat.com/g/logos/RedHat_JBoss_logo.png"><br></div></div></div></div>
</div>