Forum Discussion

shridharmishra's avatar
shridharmishra
Adept
11 years ago

Integration with CIM (eGain)

Hi All,

 

We are planning to integrate the lithium community with eGain. I have seen that for a given community the search api are not accessible directly. I am getting following error :

 

User -1 does not have the following permission(s) at ***** [allow_restapi_call_read ]

 

What i understood from the documentation that  configuration should be done in order to call Lithium's REST APIs from an endpoint or from a domain outside your community.

So in case we are not going to allow all the request from a domain, instead of this if we are going to allow few users from a certain domain to access the search API's. Then in that case how the integration need to be done, how the authentication will be done.Do we need to send the user credential with each request, if yes then what will be the format.

It will be great if you can throw some light regarding the integration and authentication of user.

 

Thanks in advance for your help!!!

  • HaidongG's avatar
    HaidongG
    Lithium Alumni (Retired)
    11 years ago

    Hi shridharmishra , 

     

    Nope it simply means that you need to have a valid user session to access the REST API.

     

    you will find more details here.

    • HaidongG's avatar
      HaidongG
      Lithium Alumni (Retired)
      11 years ago

      thanks nathan fruitful elaboration, I didn't get my answer clear. 

       

      just to add on a bit, even you have SSO turn on, you still can create a special non-SSO account with Lithium Support, and use that non-SSO account for REST API calls only, as long as the REST result is not user specified, i.e. different user sees different result.

      • shridharmishra's avatar
        shridharmishra
        Adept
        11 years ago

        First of all thanks to  nathan and @HaidongG 

         

        According to above post it is very clear that before calling the REST API we will need to establish a session if API's dont have the public read access. 

        According to the documentation i have found also that access can also be given to the calls coming from specific domain also.

        As well as we can give the read write access to a given user also. 

         

        Do we have any search API's also which gives the result of the articles (best answers) and also it includes the employee generated content? And also like api by which we can also exclude the employee generated content?