Page History

The Scripted REST API functionality allows application developers to implement is used to create custom web APIs .

Define API actions and request parameters that utilize the customized API logic (including but not limited to: the script implementing method; request path; authentication require; parameter obligate for related modules and actions).

Scripted REST API URIs

The format of scripted REST API URIs is represented below:

{your_instance_url}/v1/api/{applicationSlug}/{module_path}/{version}/{action_path}?{params}

URI analysis

This parameter is composite and designated out of the parts below:

{applicationSlug} = {application.table_prefix}_{application.name}

The attributes listed above belong to the application within of which the implementing is being conducted.

for instance integrations with external applications. You can define a server script called by a REST request from an external system.

The script can process request parameters, perform actions on the instance, and generate a response. The configured REST API creates an endpoint for the requests from external systems, including other SimpleOne instances.

Endpoint setting

To set an endpoint, complete the steps below:

1. Create an API Module. Navigate to Scripted REST API→ API Modules.

2. Specify the Name, Active and Path fields. 

   Expand
   title

How to implement your custom API

1. Create an API module.
2. Create an API version.
3. Configure API actions.
4. Configure API request parameters.
5. Bind API request parameters with appropriate API modules and actions.

Creating an API Module

API module is a connecting element for API versions and API actions. 

To create an API Module, please complete the steps below:

1. Navigate to Scripted REST API → API Modules.
2. Click New and fill in the form.
3. Click Save or Save and Exit to apply changes.

   API Module form fields

   Field Description Name Specify the API module name. Path

1. Specify a relative path to the API module, for example,

1. support.

1. Active Select this checkbox to make the module active

1. . This enables you to select this module in the referencing tables

1. : API Version, API Action, and API Module Request Parameters

1. .

Creating an API Version

Scripted REST API enables versioning, allowing developers to deploy changes without affecting existing integrations.

To configure an API version, please complete the steps below:

1. Navigate to Scripted REST API → API Versions.
2. Click New and fill in the fields.
3. Click Save or Save and Exit to apply changes.

1. 
   

2. Click Save or Save and Exit to apply the changes. A related record API Version is created and located in the Related list.

3. Click the API Version record in the Related list to open it. You can add another record of the API module version in the Related list if needed. 
   

   Expand
   title API Version

1. form fields

   Field Description Module Specify the API module created earlier for this version. Active Select this checkbox to make the version active or inactive. When set to

1. false

1. , you'll be unable to

1. select this version in referencing tables (API Action). Path

1. Specify a path to the API version, for example,

1. v1.

   
   

2. In the Related list area, select the API Action tab and click New.

   Expand
   title API Action form fields
   Field Description Name Specify the action name. Path Specify a path for API action. Active Select this action to make the version active. When set to false, you cannot select this version in referencing tables (API Action Request Parameter). Is Authentication Required Select this checkbox if the request requires authentication before the execution. The token passes in the request header. By default, this statement is equal to true. Module Select the API Module created earlier (activate module before selecting). This field references the API Module (sys_api_module) table. Version Select the API version created earlier (activate version before selecting). This field references the API Version (sys_api_version) table. HTTP Method Select the method this action implements (for example, GET or POST). Script Specify a script that implements your action using the Server-Side API, SimpleApiRequest and SimpleApiResponse side API classes there.

   
   

   Info
   You can create an API action to run its script when a request for action is received.  You can state a version to the request for action:

Configuring an API Action

In there, you can configure an action implementing the logic and behavior of your customized API method.

Your actions created earlier can be reached by URI like:

1. {your_instance_url}/v1/api/{application}/{module_path}/{version}/{action_path}

or

1. Or you can omit it: {your_instance_url}/v1/api/{application}/{module_path

1. }/{action_path} API requests without a version specified automatically use the last active version.

The second URI sample is used in case of the versioning enabled.

To configure an API action, please complete the steps below:

1. 
   

2. Fill in the Name and the Path fields. The example value of the Path field is tickets-count.

3. In the HTTP Method field, specify the method to call the action.

4. In the Script filed, add a script to call when a REST request for the action occurs. To work with the REST API requests in the SimpleOne platform, the SimpleRestRequest and SimpleRestResponse classes are defined. The data objects of these classes are available in the API action script. See the example below:

   Code Block
   language js title API action linenumbers true
   (function (request, response) { const reqBody = request.getBody(); response.setBody({ "body": JSON.stringify(reqBody), "count": 1 }) })(SimpleApiRequest, SimpleApiResponse)

   
   

5. Navigate to Scripted REST API → API actions.
6. Click New and fill in the fields.
Click
7. Click 
8. Save or Save and Exit to apply the changes.

API action form fields

Select this checkbox if the request requires authentication before execution. The token passes in the request header. By default, this statement is equal to 'true'.

Only Bearer authentication method is supported. That said, you need to pass the authentication token in the request header.

In the code example below, you can obtain an option how to retrieve the authorization token with user login and password (this code block uses example data for the setRequestUrl method and the payload constant. Replace it within the real usage):

1. You can set API action request parameter related to the action and select the Is Required option for any of them if necessary. See the screenshot below:
   Image Added
   When sending a request without a mandatory parameter, a user will receive the following message:

   Code Block
   {"error":"Required parameter param_1 not sent.","timing":{"before_echo": ...}}

   
   

Endpoint call

To call an endpoint, use the following URL format: 

https://your_instance_url/v1/api/applicationSlug/module_path/version/action_path?params

Where:

• your_instance_url – the instance URL you use.
• applicationSlug – the value of the Slug field of the application that the endpoint is created for. 
• module_path – the value of the Path filed stated in the API Module.
• version – the value of the Path field of the API Version.
• action_path – the value of the Path field stated in the API Action.
• params – the GET parameters.

See below a URL example of calling an endpoint:

https://sandbox-01.dev.simpleone.ru/v1/api/c_simple/api_module_path/api_action_path?param_1=value_1

Authorization

Anchor
authorization authorization

You can make requests to the Scripted REST API with a Bearer token or without any authorization. The type of request authorization depends on the selection of the Is Authentication Required checkbox on the API action form:

Image Added

A request to an API action that does not require authorization (Is Authentication Required=No) is executed under the Guest User:

Image Added

The requests with an invalid Bearer token are also executed under the Guest User. 

To set Basic Auth for request authorization in Scripted REST API, do the following:

1. Set up sending a POST request /v1/auth/login with Basic Auth from an external system to an instance to receive a token.
2. Set up sending a request to the Scripted REST API with the token received in the first step. 

Find below an authorization scheme:

Image Added

This is an example of a server script that uses the Simple API to get a token by sending a POST request with Basic Auth authorization: 

const simpleInstanceUri = ss.getProperty('simple.instance.uri');
const URL_BASE = (simpleInstanceUri.startsWith('https://')) ? simpleInstanceUri : `https://${simpleInstanceUri}`;
const authRequest = sws.restRequestV1();
authRequest.setRequestUrl(`${URL_BASE}/v1/auth/login`);
authRequest.setRequestMethod('POST');
authRequest.setRequestHeader('Content-type', 'application/json');
const payload = {
    "username": "admin",
    "password": "qwerty123456"
}
authRequest.setRequestBody(JSON.stringify(payload));
const authResponse = authRequest.execute();
if (JSON.parse(authResponse.getBody()).status === 'ERROR') {
  ss.error(JSON.parse(authResponse.getBody()).errors[0].message);
  ss.info('Check credentials at 10..11 lines of current script');
  return;
}
ss.info(JSON.parse(authResponse.getBody()).data.auth_key);
// Info: 5WvOT9Ejlxd6Gb8bkCWMtG3XXMYcoDDJ

Supported types Content-Type

To get a request body in a script of API action, call the getBody() method for the request object.

Find below an example script for the API action:

Specify a script implementing your action, using the Server-Side API, SimpleApiRequest and SimpleApiResponse side API classes there.

Configuring API request parameters

In there, you can specify the request parameters, for example, you can make the parameter mandatory for all referenced API essences.

To configure this, please complete the steps below:

1. Navigate to Scripted REST API → API Request Parameters.
2. Click New and fill in the fields.
3. Click Save or Save and Exit to apply changes.

API Request parameter form fields

Configuring API action request parameters

In this section, you can bind specified API module with relevant request parameters.

To configure them, please complete the steps below:

1. Navigate to Scripted REST API → API Action Request Parameters.
2. Click New and fill in the fields.
3. Click Save or Save and Exit to apply changes.

API action request parameters form fields

Configuring API module request parameters

In this section, you can bind specified API module with relevant request parameters.

To configure this relationship, please complete the steps below:

1. Navigate to Scripted REST API → API Module Request Parameters.
2. Click New and fill in the fields.
3. Click Save or Save and Exit to apply changes.

API Module request parameters form fields

Specify a request parameter related to this module. When specified, all actions referenced to the module above can use this request parameter. This field references the Request Parameters (sys_api_request_param) table.

Example case

Consider a case of implementing Scripted REST API returning data in response to a POST request.

The request looks like: http://your-instance-url.example.com/v1/api/c_simple/api_module_path/api_action_path?param_1=value_1

Your actions should go as follows:

(function (request, response) {
   
   ss.info("getBody(): " + JSON.stringify( const reqBody = request.getBody()));
    const bodyForResponse = typeof reqBody  ss.info("getHeader('accept-encoding'): " +=== 'string' ? reqBody : JSON.stringify(request.getHeader('accept-encoding'))reqBody);
    ssresponse.info("getHeaders(): " + JSON.stringify(request.getHeaders())); // {"accept-encoding":["gzip, deflate, br"],"postman-token":["7803024c-7e21-4e0d-840b-392931597c2c"],"cache-control":["no-cache"],"accept":["*/*"],"user-agent":["PostmanRuntime/7.26.8"],"content-length":["0"],"connection":["close"],"x-nginx-proxy":["true"],"host":["your-instance-url"],"x-real-ip":["XX.XX.XX.XX"],"content-type":[""]}
    ss.info("getQueryParams(): " + JSON.stringify(request.getQueryParams())); // {"param_1":"value_1"}
    ss.info("getQueryString(): " + request.getQueryString()); // param_1=value_1
    ss.info("getUri(): " + request.getUri()); // /v1/api/c_simple/api_module_path/api_action_path?param_1=value_1
    ss.info("getUrl(): " + request.getUrl()); // https://your-instance-url.example.comsetBody({
      "request_body_type": typeof reqBody,
      "request_body": bodyForResponse
    })
   
})(SimpleApiRequest, SimpleApiResponse)

Use the following Content-Type types for the requests sent to the API action:

• application/json
• application/jsonp
• application/xml
• text/xml
• text/html
• text/plain

Sending a POST request with a JSON body

Image Added

Sending a POST request with an XML body

Image Added

Sending a POST request with an HTML body

Image Added

Sending a POST request with a text body

Image Added

Response from API action

To create a response from the API action, use the  response object:

response.setBody({
      "count": 100,
      "status": "OK",
      "error_message": ""
    })

The response of the API action includes a key timing containing the execution time of the API action script:

  "timing": {
        "before_echo": 0.0884089469909668
    }

Setting examples

Here you can download a file with example configurations for the scripted REST API: [SOC] - Scripted REST API. Import the pack to your instance and try the following example settings. 

Example 1. Get a system property value without authorization

To verify the example: 

1. Go to the main page of your instance.
2. Add to the URL bar the following value: /v1/api/c_simple/api_module_path/api_action_path?param_1=value_1

1. .
2. Copy the result URL.
3. Go to the URL in Incognito mode.

As a result, you receive a response from the API action /record/sys_api_action/164054047017513732 with a system property value simple.auth_page.support_phone

. 

Example 2. Create a task record with an attachment

To verify the example: 

1. Open the record /record/sys_script/164053985417710860 .
2. Click Run to run the script.

As a result, you receive a response from the API action /record/sys_api_action/161831494014244852.

On the bottom of the script form, there is a link to the created task record. See the screenshot below:

Image Added

The record contains two attachments with base 64 files transferred in lines 14-15 of the script in Step 1. See the screenshot below:

 Image Added 

Features and recommendations 

1. API action script is executed regardless of ACL.
2. Authorization of requests to the Scripted REST API is not possible with Basic Auth. To authorize, use the solution described above in the Authorization section.
3. A reply to the API action containing a key error with a value Undefined index: SimpleApiResponse means the script API action contains an error.
4. To avoid data corruption, convert JSON data type into type String using a JSON.stringify() method.
   Image Added 
   
5. If the execution time of the API action script exceeds the Timeout, move a part of the script to the Event Script and call a system event with an API action script.