User Web Service
Although it is disabled by default, there is a web service that returns all of the details for the currently logged in user.
Every operation and capability of Appkit can be invoked via REST-ful web service endpoints supporting both XML and JSON responses for asynchronous client-side operations, and integrating with external systems. For example, users can perform secure searches to any platform supported by Appkit.
Invoke the User web service by adding this parameter to
Access the User web service via GET request at
See also Importing Security Certificates
conf/security.conf:
/twigkit/api/user for example:
Importing Security Certificates
Importing Security Certificates
There are numerous reasons that you might be required to import security certificates into the trusted keystore that the Java Virtual Machine (JVM) or the Appkit application is configured to use. These include:Using a custom certificate for the
See Create a Java Keystore for Use with Fusion for more information about the process of adding certificates to your Java KeyStore to use with the 
- Resources from secure servers proxied through Appkit (such as images displayed using the Media module)
- Authentication mechanisms which require communication with secure back-ends
- Search platforms using secure protocols for communication
java.security.cert.CertificateException error. If the error is coming directly from the browser (easily identifiable as a non-Java exception) then it is the user’s browser or operating system rejecting a certificate and not an Appkit related problem.If it is evident that the issue is that the JVM does not trust the CA that issues your SSL certificate it does not mean that the certificate is not valid, but rather that the database of valid CAs that comes with the JVM is not complete and does not include the CA root certificate.
To solve this you must import the SSL certificate into the Java keystore on each VM running Appkit.Fusion 5.x
Using a custom certificate for the api-gateway
See Create a Java Keystore for Use with Fusion for more information about the process of adding certificates to your Java KeyStore to use with the api-gateway.Using custom certificates for specific connectors
See the Add additional trusted certificate(s) for connectors to allow crawling of web resources with SSL/TLS enabled section of Deploy Fusion at Scale for more information about the process of adding a custom certificate for specific connectors.Java SSL
1. Download the certificate
Download or otherwise obtain the SSL certificate CRT file for the secured server in question. If the server is accessible from a browser, an easy method to download the certificate is to use the browser’s security inspection tools (usually clicking on the padlock icon in most browsers). For example, in Safari it can be done in this way forhttps://www.google.co.uk:2. Import the certificate
- Run the Java keytool on the machine on which you are running Appkit. This can be your local development machine or a VM or server for QA or production. Assuming you have set the JAVA_HOME environment variable as indicated below:
- Change the path to the .CRT file if needed.
- The default password of the JVM cacerts keystore is “changeit”
- Restart the application server (for example, Tomcat) and retry the action that requires communication over SSL.
This is a purely SSL+Java configuration issue and has nothing to do with Appkit. If you Google the issue “peer not authenticated”, you will find a lot of people suggesting a workaround that is to simply accept all SSL certificates in the Java HTTP client. That is a very bad idea for the reason that it bypasses SSL security and exposes the application to a MITM attack.