Understanding and Resolving the HTTP 403 Error with the CAS REST API

The Problem: Session Creation Failure

Imagine the following scenario: you are working on a deployment image (like a PDC image) and you try to create a new CAS session by sending a PUT request to the sessions endpoint.

Your command might look like this:

The Solutions

To solve this problem, you must provide valid authentication information in your HTTP request. Two main methods are available:

1. Basic Authentication (Basic Auth)

This is the most direct method for quick tests. You pass your username and password directly in the request.

⚠️ Security Warning: Basic authentication encodes your credentials in Base64, which is easily decodable. It is imperative to use this method only over HTTPS (secure port) to prevent your credentials from being transmitted in clear text over the network.

2. The OAuth Token (Recommended)

The standard and most secure method for modern applications is to use an OAuth token.

Instead of sending your password with every request, you first obtain an access token and then include it in the header of your API calls.

Header Syntax: You must add an Authorization header containing your token:

1
1
Authorization: Bearer

In Summary

If you encounter a 403 error on the CAS API, it's a sign that the server doesn't know who you are. Make sure to include valid credentials (secure Basic Auth or an OAuth Token) to unlock access and successfully create your session.