HTTP / HTTPS Methods Needed for Orchestrator

News Knowledge Base
,
1

Which HTTP/HTTPS methods are required by Orchestrator? OR Which HTTP/HTTPS methods are not used by Orchestrator?

Issue description:


Which HTTP / HTTPS methods are not needed by Orchestrator? (like GET, POST, PUT, TRACE, OPTIONS, etc). Is there a list, of which HTTP methods are strictly necessary for the functioning of Orchestrator?

Resolution:

  • Sometimes, security scans may show the Orchestrator server allowing many HTTP methods. However, not all of them are necessary.
  • The used methods can be found in: "C:\Program Files (x86)\UiPath\Orchestrator\Web.config". See below for reference.
      <add verb="GET" allowed="true" />
      <add verb="HEAD" allowed="true" />
      <add verb="POST" allowed="true" />
      <add verb="PUT" allowed="true" />
      <add verb="PATCH" allowed="true" />
      <add verb="DELETE" allowed="true" />
      <add verb="OPTIONS" allowed="true" />