Securing APIs using basic authentication hander in WSO2 EI - wso2

Question

I'm using an API that works as a gateway between my back-end service and external clients. i'm trying to secure the access to my API with basic authentication using user/password base encoding. After following some guides, i added the handler section in my API in order to manage the auth module.
I tried this section :
<handlers>
<handler class="org.wso2.rest.BasicAuthHandler"/>
</handlers>
The Auth handler is working good for me but only with admin/admin credentials even if i change the password of the user admin.
How can i add a user and let him consume my API with specefic credentials?

Answer 1

I created a user using the WSO2 EI Management console following the below steps.
Click Configure in the menu tab on the left side and click Add under Users and Roles.
Select Add new user
Enter Username and Password and click Next
Select Roles of the User and click Finish (I selected admin privileges)
Then I deployed following API as mentioned in 1
<api xmlns="http://ws.apache.org/ns/synapse" name="StockQuoteAPI"
context="/stockquote">
<resource methods="GET" uri-template="/view/{symbol}">
<inSequence>
<payloadFactory media-type="xml">
<format>
<m0:getQuote xmlns:m0="http://services.samples">
<m0:request>
<m0:symbol>$1</m0:symbol>
</m0:request>
</m0:getQuote>
</format>
<args>
<arg evaluator="xml" expression="get-property('uri.var.symbol')"/>
</args>
</payloadFactory>
<header name="Action" scope="default" value="urn:getQuote"/>
<send>
<endpoint>
<address uri="http://localhost:9000/services/SimpleStockQuoteService" format="soap11"/>
</endpoint>
</send>
</inSequence>
<outSequence>
<send/>
</outSequence>
<faultSequence/>
</resource>
<handlers>
<handler class="org.wso2.carbon.integrator.core.handler.RESTBasicAuthHandler"/>
</handlers>
</api>
Then I could send the request using postman with the new username/password.
1 https://docs.wso2.com/display/EI650/Applying+Security+to+an+API#ApplyingSecuritytoanAPI-BasicAuthUsingaBasicAuthhandler

Answer 2

Thank you for the response. i tried to change "org.wso2.rest.BasicAuthHandler by "org.wso2.carbon.integrator.core.handler.RESTBasicAuthHandler" in my api and redeployed it. I got this error
Caused by: java.lang.ClassNotFoundException: org.wso2.carbon.integrator.core.handler.RESTBasicAuthHandler cannot be found by synapse-core_2.1.7.wso2v60
It seems that i need the .jar file in order to load it but i cannot find it. Can you please provide a link to download please?

Answer 3

I upgraded to 6.5.0 version of the ESB and it worked. thanks !