Hi, I'm creating a REST API with .NET, which I will be hosting on the same server as K2.
I'm using the REST service broker for this - we're using K2 5.2.
What I'd like to do is pass in the user's login name. Ideally without having to pass this in as a parameter to the rest service SmartObject, which could be manipulated.
We can use impersonation to get K2 to pass in the users identity, but I don't see a way of making this work without setting up Kerberos, which is a dependency I'd like to avoid for just checking who triggered the request.