External frontend signup using Generic REST security with BPM trigger

Support
#1

1.) We are considering implementing an anonymous access to create signup records for users from the external frondend client. Is this good enough or is a DTO required for additional safety?

2.) Also can the creation of the record serve as the trigger for a BPM process in or do we need to create a quartz job to keep checking for new signups?

#2

Hello,

  1. Tell us more, are you planning to create a custom RestController for registering new users?
  2. You can create an event on entity creation and start the BPM process in it.

Entity Event:
https://docs.jmix.io/jmix/data-access/entity-events.html

BPM API:
https://docs.jmix.io/jmix/bpm/api.html#starting-process-programmatically

Regards,
Nikita

#3

The idea is to create a userSignup entity which will contain applications from new candidate users. The create event would then trigger a BPM process where applications are vetted and accepted or denied.

The form for the signup will be an external application which is server side rendered on NodeJS/Vue 3 to protect any urls and sensitive data that may be used in the signup submission process

#5

You can create your own rest endpoint for registering a new user and write all the necessary logic there. It is good practice to use DTO in RestController.

Regards,
Nikita

1 Like