@PAVISHAKIT

the right track with using custom bearer authentication and a decision table to validate users. The issue with the error message not displaying might be due to how the error handling is being managed in the web embed.

1. Check the Web Embed Configuration: Ensure that the web embed is configured to handle and display error messages properly. Sometimes, the front-end might not be set up to catch and display the error messages sent from the server.

2. Modify the Error Handling Logic:

   • Instead of setting Param.pyFailMessage, try using a different approach to pass the error message to the front-end. For example, you can set a custom response header or use a different parameter that the front-end can easily access and display.
   • Ensure that the PRAuthentication.DEFAULT_CHALLENGE is correctly implemented to handle the error message and pass it to the web embed.

3. Debugging:

   • Use browser developer tools to inspect the network requests and responses. Check if the error message is being sent from the server but not displayed on the front-end.
   • Add logging to your custom bearer activity to ensure that the error message is being set correctly.

4. Front-End Handling:

   • Ensure that the front-end code is set up to catch the error response and display the message. This might involve adding error handling logic in the JavaScript code that handles the web embed.

approach to modify the error handling:

if (isValidUser) {
    // Proceed with normal flow
} else {
    // Set custom error message
    response.setHeader("Custom-Error-Message", "Invalid User");
    response.setStatus(HttpServletResponse.SC_UNAUTHORIZED);
}

And in your front-end JavaScript:

fetch('your-api-endpoint', {
    method: 'GET',
    headers: {
        'Authorization': 'Bearer ' + token
    }
})
.then(response => {
    if (!response.ok) {
        // Extract custom error message
        const errorMessage = response.headers.get('Custom-Error-Message');
        if (errorMessage) {
            alert(errorMessage); // Display the error message
        } else {
            alert('An error occurred');
        }
    } else {
        // Handle successful response
    }
})
.catch(error => {
    console.error('Error:', error);
});

By ensuring both the back-end and front-end are properly handling the error messages, you should be able to display the "Invalid User" message in the web embed screen

Step 1: Create a Decision Table

1. Navigate to Records > Decision > Decision Table.
2. Create a new Decision Table to validate users.
3. Define the conditions and results to determine if a user is valid or invalid.

Step 2: Implement Custom Bearer Authentication

1. Create a new Authentication Service:
   • Go to Records > SysAdmin > Authentication Service.
   • Create a new service and select Custom as the type.
2. Configure the Authentication Service:
   • In the Custom Authentication Activity, specify the activity that will handle the authentication logic.

Step 3: Create the Custom Authentication Activity

1. Create a new Activity:
   • Go to Records > Technical > Activity.
   • Create a new activity to handle the custom bearer authentication.
2. Add Steps to the Activity:
   • Step 1: Extract the bearer token from the request header.
   • Step 2: Validate the token using the Decision Table created in Step 1.
   • Step 3: Set the error message if the user is invalid.

the activity:

// Step 1: Extract token
String token = tools.getRequestor().getRequestHeader("Authorization");

// Step 2: Validate token
boolean isValidUser = validateUser(token); // Implement this method to use the Decision Table

// Step 3: Set error message if invalid
if (!isValidUser) {
    tools.getRequestor().setResponseHeader("Custom-Error-Message", "Invalid User");
    tools.getRequestor().setResponseStatus(401); // Unauthorized
    tools.getRequestor().invalidate();
}

Step 4: Handle the Error Message in the Front-End

1. Modify the front-end code to handle the error response and display the message.
2. Example JavaScript to fetch data and handle errors:

fetch('your-api-endpoint', {
    method: 'GET',
    headers: {
        'Authorization': 'Bearer ' + token
    }
})
.then(response => {
    if (!response.ok) {
        // Extract custom error message
        const errorMessage = response.headers.get('Custom-Error-Message');
        if (errorMessage) {
            alert(errorMessage); // Display the error message
        } else {
            alert('An error occurred');
        }
    } else {
        // Handle successful response
    }
})
.catch(error => {
    console.error('Error:', error);
});

Step 5: Test the Implementation

1. Deploy your changes and test the authentication flow.
2. Verify that invalid users see the "Invalid User" message and valid users can access the web embed.