[SalesForce] Custom REST Service HTTPS error

I am building an apex REST service to be hosted on a public site using the approach outlined here (basically hosting a REST service on a site allows you to perform actions against it without authentication, which is nice for javascript integration).

http://blogs.developerforce.com/developer-relations/2012/02/quick-tip-public-restful-web-services-on-force-com-sites.html

My service works perfectly in Sandbox, but when attempting to access it in prod, it always throws

<Errors>
    <Error>
        <errorCode>UNSUPPORTED_CLIENT</errorCode>
        <message>HTTPS Required</message>
    </Error>
</Errors>

This error happens even when accessing the service via HTTPs.

Here is my functional sandbox one
https://fpitesters.testbed.cs7.force.com/webServices/services/apexrest/respondentPortal/

You will get an auth token error there, that is expected. It's just a basic security measure.

And here is the production one
https://fpitesters.force.com/webServices/services/apexrest/respondentPortal/

UPDATE: So as Josh Birk pointed out, you do need to use the secure sub domain. If you try to just use HTTPs on the regular URL you do get redirected to a regular http domain. So with that in mind, the url for my service should be

https://fpitesters.secure.force.com/webServices/services/apexrest/respondentPortal/

However that URL says that the service couldn't be found.

<Errors>
    <Error>
        <errorCode>NOT_FOUND</errorCode>
         <message>Could not find a match for URL /respondentPortal/</message>
    </Error>
</Errors>

Not really sure where to go from here. Is this a bug?

Best Answer

Your production endpoint is only HTTP however. Remember that secure Force.com site has a specific domain, so I think you need:

https://fpitesters.secure.force.com/FPITestersIndex

Related Solutions

[SalesForce] Having problems with authenticating to the custom REST class

You should also include the session ID in your rest call

for eg if you're calling from jQuery Ajax include the authorization header like below:

$.ajax({
url : "https://instance/services/data/v26.0/sobjects/global/describe/layouts/",
headers : {"Authorization": "Bearer AddyoursessionIdhere"},
contentType : "application/json",
type :"GET"
}).done(function(response){
    console.log('the result '+ JSON.stringify(response));

}).error(function(error){
    console.log('the error mesasge is '+ JSON.stringify(error));
});

or in curl, include the below header along with the request

-H "Authorization: Bearer sessionId

You can go thru (authentication section) this on how to get the session Id in curl.. http://www.salesforce.com/us/developer/docs/api_rest/

But if you want to make the REST public then you can look it up here: http://www.wadewegner.com/2013/03/creating-anonymous-rest-apis-with-salesforce-com/

Also instead of using the REST client you can use this link http://www.hurl.it to make simple GET requests

[SalesForce] Hello World Custom Rest Api endpoint not working

Not sure on that error but I do see a couple of potential issues that might be causing you problems

The get is setup wrongly - when I tried that, I got an error because it is not filtering by the Id you pass in - see line highlighted below from docs that you are missing. As such, it needs to returns a list of records (the code does work when you change the return type)

@HttpGet
    global static Account doGet() {
        RestRequest req = RestContext.request;
        RestResponse res = RestContext.response;
        **String accountId = req.requestURI.substring(req.requestURI.lastIndexOf('/')+1);**
        Account result = [SELECT Id, Name, Phone, Website FROM Account WHERE Id = :accountId];
        return result;
    }

Also, I probably wouldn't name the RestResource 'Account' as that is a standard resource name...wondering if that is causing a conflict?

Update: If you have a namespace enabled for your org, then it will need to be included in the url. In your case it would be:

https://na15.salesforce.com/services/apexrest/your_namespace/Account/001i000000VdaoqAAB where "your_namespace" is the namespace of your org.

Related Topic