title: JBPM Swagger UI and my REST services produces 403 (Forbidden) on remote calls on JBoss EAP 7.3.0 with JBPM 7.44
body: <p>I recently moved from developing JBPM on my local machine to hosting my code on another machine and am trying to get it to work for the first time.  The machine has JBoss 7.3.0 installed and I installed Business Central, KieServer and my custom code to the machine.  The KieServer Swagger UI comes up (http://localhost:8080/kie-server/docs/#/) but even the simplest (no parameter) calls in the UI produce a 403 (Forbidden) error.</p>
  <p>This seems to be the relevant configuration from my standalone-full.xml.  I am binding to 0.0.0.0 to get this to run and will restrict it once my code is running.  What do I need to change to get the Swagger UI to call JBPM via REST?  I assume I need to get this to run to get <em>my</em> REST calls to run!</p>
  <p>I think we only use basic authentication on the server - it is not yet tied into Keycloak and my manager's manager gave me the keystore he made....so I am using a username/password I installed with the JBOSS CLI (add-user).</p>
  <pre><code>       &lt;subsystem xmlns=&quot;urn:jboss:domain:undertow:10.0&quot; default-server=&quot;default-server&quot; default-virtual-host=&quot;default-host&quot; default-servlet-container=&quot;default&quot; default-security-domain=&quot;other&quot; statistics-enabled=&quot;${wildfly.undertow.statistics-enabled:${wildfly.statistics-enabled:false}}&quot;&gt;
              &lt;buffer-cache name=&quot;default&quot;/&gt;
              &lt;server name=&quot;default-server&quot;&gt;
                  &lt;http-listener name=&quot;default&quot; socket-binding=&quot;http&quot; redirect-socket=&quot;https&quot; enable-http2=&quot;true&quot;/&gt;
                  &lt;https-listener name=&quot;https&quot; socket-binding=&quot;https&quot; security-realm=&quot;ApplicationRealm&quot; enable-http2=&quot;true&quot;/&gt;
                  &lt;host name=&quot;default-host&quot; alias=&quot;localhost&quot;&gt;
                      &lt;location name=&quot;/&quot; handler=&quot;welcome-content&quot;/&gt;
                      &lt;http-invoker security-realm=&quot;ApplicationRealm&quot;/&gt;
                  &lt;/host&gt;
              &lt;/server&gt;
              &lt;servlet-container name=&quot;default&quot;&gt;
                  &lt;jsp-config/&gt;
                  &lt;websockets/&gt;
              &lt;/servlet-container&gt;
              &lt;handlers&gt;
                  &lt;file name=&quot;welcome-content&quot; path=&quot;${jboss.home.dir}/welcome-content&quot;/&gt;
              &lt;/handlers&gt;
          &lt;/subsystem&gt;
          &lt;subsystem xmlns=&quot;urn:jboss:domain:webservices:2.0&quot; statistics-enabled=&quot;${wildfly.webservices.statistics-enabled:${wildfly.statistics-enabled:false}}&quot;&gt;
              &lt;wsdl-host&gt;${jboss.bind.address:0.0.0.0}&lt;/wsdl-host&gt;
              &lt;endpoint-config name=&quot;Standard-Endpoint-Config&quot;/&gt;
              &lt;endpoint-config name=&quot;Recording-Endpoint-Config&quot;&gt;
                  &lt;pre-handler-chain name=&quot;recording-handlers&quot; protocol-bindings=&quot;##SOAP11_HTTP ##SOAP11_HTTP_MTOM ##SOAP12_HTTP ##SOAP12_HTTP_MTOM&quot;&gt;
                      &lt;handler name=&quot;RecordingHandler&quot; class=&quot;org.jboss.ws.common.invocation.RecordingServerHandler&quot;/&gt;
                  &lt;/pre-handler-chain&gt;
              &lt;/endpoint-config&gt;
              &lt;client-config name=&quot;Standard-Client-Config&quot;/&gt;
          &lt;/subsystem&gt;
          &lt;subsystem xmlns=&quot;urn:jboss:domain:weld:4.0&quot;/&gt;
      &lt;/profile&gt;
      &lt;interfaces&gt;
          &lt;interface name=&quot;management&quot;&gt;
              &lt;inet-address value=&quot;${jboss.bind.address.management:0.0.0.0}&quot;/&gt;
          &lt;/interface&gt;
          &lt;interface name=&quot;public&quot;&gt;
              &lt;inet-address value=&quot;${jboss.bind.address:0.0.0.0}&quot;/&gt;
          &lt;/interface&gt;
          &lt;interface name=&quot;unsecure&quot;&gt;
              &lt;inet-address value=&quot;${jboss.bind.address.unsecure:0.0.0.0}&quot;/&gt;
          &lt;/interface&gt;
      &lt;/interfaces&gt;
      &lt;socket-binding-group name=&quot;standard-sockets&quot; default-interface=&quot;public&quot; port-offset=&quot;${jboss.socket.binding.port-offset:0}&quot;&gt;
          &lt;socket-binding name=&quot;ajp&quot; port=&quot;${jboss.ajp.port:8009}&quot;/&gt;
          &lt;socket-binding name=&quot;http&quot; port=&quot;8080&quot;/&gt;
          &lt;socket-binding name=&quot;https&quot; port=&quot;${jboss.https.port:8443}&quot;/&gt;
          &lt;socket-binding name=&quot;iiop&quot; interface=&quot;unsecure&quot; port=&quot;3528&quot;/&gt;
          &lt;socket-binding name=&quot;iiop-ssl&quot; interface=&quot;unsecure&quot; port=&quot;3529&quot;/&gt;
          &lt;socket-binding name=&quot;management-http&quot; interface=&quot;management&quot; port=&quot;${jboss.management.http.port:9990}&quot;/&gt;
          &lt;socket-binding name=&quot;management-https&quot; interface=&quot;management&quot; port=&quot;${jboss.management.https.port:9993}&quot;/&gt;
          &lt;socket-binding name=&quot;txn-recovery-environment&quot; port=&quot;4712&quot;/&gt;
          &lt;socket-binding name=&quot;txn-status-manager&quot; port=&quot;4713&quot;/&gt;
          &lt;outbound-socket-binding name=&quot;mail-smtp&quot;&gt;
              &lt;remote-destination host=&quot;dummy.smtp.com&quot; port=&quot;25&quot;/&gt;
          &lt;/outbound-socket-binding&gt;
      &lt;/socket-binding-group&gt;
  </code></pre>