Which Http/ Https methods are not used by Orchestrator ?(like: GET, POST, PUT, TRACE, OPTIONS,etc)
Question: Which Http / Https methods are not used by Orchestrator ?(like: GET, POST, PUT, TRACE, OPTIONS,etc) .
When security team performed an security test on the fresh installed On Prem Orchestrator (21.10.3). The server allows too much HTTP-methods. Is there a list, which HTTP methods are strictly necessary for the functioning of Orchestrator with the environment of Studio (22.4) Robot (22.4) and Insights (21.10.3)?
Resolution: The used methods can be found in : C:\Program Files (x86)\UiPath\Orchestrator\Web.config
<add verb="GET" allowed="true" />
<add verb="HEAD" allowed="true" />
<add verb="POST" allowed="true" />
<add verb="PUT" allowed="true" />
<add verb="PATCH" allowed="true" />
<add verb="DELETE" allowed="true" />
<add verb="OPTIONS" allowed="true" />