This section explains how to attach a custom workflow to the application creation operation in WSO2 API Manager (WSO2 API-M). First, see Workflow Extensions for information on different types of workflow executors.
Attaching a custom workflow to application creation allows you to control the creation of applications within the Store. An application is the entity that holds a set of subscribed API's that would be accessed by a authorization key specified for that praticular application. Hence, controlling the creation of these applications would be a decision based on the oragnization's requirement. Some example use cases would be
- Review the information of the application by a specific reviewer before the application is created.
- The application creation would be offered as a paid service.
- The application creation should be allowed only to users who are in a specific role.
Before you begin, if you have changed the API Manager's default user and role, make sure you do the following changes:
- Change the credentials of the workflow configurations in the registry resource
- Point the database that has the API Manager user permissions to BPS.
- Share any LDAPs, if exist.
<API-M>/business-processes/application-creation/HumanTask/ApplicationsApprovalTask-1.0.0.zipfile, update the role as follows in the
ApplicationsApprovalTask.htfile, and ZIP the ApplicationsApprovalTask-1.0.0 folder.
Configuring the Business Process Server
- Download WSO2 Business Process Server.
Set an offset of 2 to the default BPS port in
<BPS_HOME>/repository/conf/carbon.xmlfile. This prevents port conflicts that occur when you start more than one WSO2 product on the same server. For more information, see Changing the Default Ports with Offset.
Tip: If you change the BPS port offset to a value other than 2 or run WSO2 API-M and WSO2 BPS on different machines (therefore, want to set the
hostnameto a different value than
localhost), you need to search and replace the value 9765 in all the files (
.epr) inside the
<APIM_HOME>/business-processesdirectory with the new port (i.e., the value of 9763 +
<BPS_HOME>/repository/conf/b4p-coordination-config.xmlfile and set the
TaskCoordinationEnabledproperty to true.
Copy the following from the
<API-M_HOME>/business-processes/eprdirectory to the
<BPS_HOME>/repository/conf/eprdirectory does not exist, create it.
Make sure to give the correct credentials in the
Start the BPS server and sign in to the management console (
If you are using Mac OS with High Sierra, you may encounter following warning when login into the Management console due to a compression issue exists in High Sierra SDK.
To avoid this issue open <BPS_HOME>/repository/conf/tomcat/catalina-server.xml and change the compression="on" to compression="off" in Connector configuration and restart the BPS.
- Select Processes > Add and upload the
<APIM_HOME>/business-processes/application-creation/BPEL/ApplicationApprovalWorkFlowProcess_1.0.0.zipfile to BPS.
This is the business process archive file.
- Select Add under the Human Tasks menu and upload the
<APIM_HOME>/business-processes/application-creation/HumanTask/ApplicationsApprovalTask-1.0.0.zipfile to BPS.
This is the human task archived file.
Configuring WSO2 API Manager
<API-M_HOME>/repository/deployment/server/jaggeryapps/admin/site/conf/site.json file and configure "
workFlowServerURL" under "
workflows" to point to the BPS server (e.g.,
Engaging the WS Workflow Executor in the API Manager
First, enable the application creation workflow.
- Sign in to WSO2 API-M management console (
https://<Server-Host>:9443/carbon) and select Browse under Resources.
Go to the
/_system/governance/apimgt/applicationdata/workflow-extensions.xmlresource, disable the Simple Workflow Executor, and enable WS Workflow Executor. In addition, specify the service endpoint where the workflow engine is hosted and the credentials required to access the said service via basic authentication (i.e., username/password based authentication).
All the workflow process services of the BPS run on port 9765 because you changed its default port (9763) with an offset of 2.
The application creation WS Workflow Executor is now engaged.
Go to the API Store, click Applications and create a new application.
It invokes the application creation process and creates a Human Task instance that holds the execution of the BPEL process until some action is performed on it.
You will see the following application details stating "Waiting for approval" if the BPEL is invoked correctly, indicating that the request is successfully submitted.
Also, if you go to the application listing page, you will see the status of the application is stated as "INACTIVE(Waiting for approval)"
Sign in to the Admin Portal (
https://localhost:9443/admin), list all the tasks for application creation and approve the task. It resumes the BPEL process and completes the application creation.
Go back to the Applications page in WSO2 API Store and see the created application.
Whenever a user tries to create an application in the API Store, a request is sent to the workflow endpoint. Given below is a sample:
Elements of the above configuration are described below:
Name of the application the user creates.
Throttling tier of the application.
When the OAuth2 Authorization Code grant type is applied, this is the endpoint on which the callback needs to happen after the user is authenticated. This is an attribute of the actual application registered on the API Store.
Description of the application
Tenant domain associated with the application (domain of the user creating the application).
Username of the user creating the application.
The unique reference against which a workflow is tracked. This needs to be sent back from the workflow engine to the API Manager at the time of workflow completion.
At the time of workflow completion, the workflow engine sends the workflow-completion request to this URL. This property is configured in the
<callBackURL>element in the