External frontend signup using Generic REST security with BPM trigger

Support
1

1.) We are considering implementing an anonymous access to create signup records for users from the external frondend client. Is this good enough or is a DTO required for additional safety?

2.) Also can the creation of the record serve as the trigger for a BPM process in or do we need to create a quartz job to keep checking for new signups?

2

Hello,

  1. Tell us more, are you planning to create a custom RestController for registering new users?
  2. You can create an event on entity creation and start the BPM process in it.

Entity Event:

BPM API:

Regards,
Nikita

3

The idea is to create a userSignup entity which will contain applications from new candidate users. The create event would then trigger a BPM process where applications are vetted and accepted or denied.

The form for the signup will be an external application which is server side rendered on NodeJS/Vue 3 to protect any urls and sensitive data that may be used in the signup submission process

5

You can create your own rest endpoint for registering a new user and write all the necessary logic there. It is good practice to use DTO in RestController.

Regards,
Nikita

1 Like