Using the REST Protection Forward Proxy

About this task

To use the eperi sEcure Platform with the eperi sEcure AnyApp REST-based the used REST client must now be configured to call the endpoint offered by the eperi sEcure Platform instead of the originally provided REST service.

Usually this can be done by Setting up a Proxy auto-config file. Please follow the procedure:
  1. In case that you are using the Root certificate from eperi sEcure Platform for the forward proxy, deploy the certificate to your clients as follows:
    • Access eperi sEcure Admin Console.
    • Select Settings > Certificate Authority then click Download certificate authority.
    • Save the certificate file to a location of your choice.
    • Deploy eperi sEcure Platform Root certificate to all of your clients.
  2. Set up a Proxy auto-config (PAC) server.
  3. Create a PAC file containing the hostnames of the endpoints, for example:
    function FindProxyForURL(url, host) {
                        
var proxyServer = "<yourHost>:443";
var devForward = "dev<yourInstanceId>.service-now.com"
var loginForward = "developer.servicenow.com";
                                
if(shExpMatch(host, loginForward) || shExpMatch(host, devForward)) {                                
return "PROXY " + proxyServer;                                
}                                
return "DIRECT";                               
}
  4. Deploy the PAC file on your PAC server.
  5. Configure a proxy on each client (for example on a Windows 10 client):
    • Open Settings > Network & Internet > Proxy.
    • In the Automatic Proxy Setup section, set the Use Setup Script switch to On.
    • Enter the Script address, for example: http(s)://<pac-server-hostname>/<mypacfile>.pac
    • Click Save.

Results

The eperi sEcure Platform will protect and execute a wildcard search on the fields defined in the configuration created at Setting up the REST endpoint configuration accordingly. It then routes the detokenized/decrypted responses sent to its endpoint to the one configured in App settings made in Configuring the REST Protection Forward Proxy in eperi sEcure Platform.