Authentication

The modeler reuses the authentication infrastructure of cibseven-webclient. Every REST endpoint validates the session token provided in the request.

Disabling Authentication

Authentication is enabled by default. It can be disabled for local development or testing:

cibsevenmodeler:
  authentication:
    enabled: false

Or via environment variable:

CIBSEVENMODELER_AUTHENTICATION_ENABLED=false

Never disable authentication in production

Disabling authentication exposes all modeler REST endpoints without any access control. Only use this setting in isolated development or CI environments.

Integration with CIB seven Engine

Endpoints that interact with the CIB seven engine (deploy, start process) forward the authenticated user context to the engine. This ensures that engine audit trails reflect the actual user, not a service account.

On this Page: