ServiceNow - Business Rules listed under System Definitions
在 Business Rules 页面中，单击 新建 按钮。
- 创建新业务规则* 新业务
在新记录中，添加 名称，选择要为 变更请求的表。 选中 高级 复选框以查看高级选项卡。
添加网络钩子脚本的高级选项* 添加网络钩子的高级选项
在 高级 选项卡中，添加 Webhook 脚本。
(functionexecuteRule(current, previous /*null when async*/) {
try {
if (current.u_appconfiguration_tag == "appconfig-workflow" && (current.state == -1 || current.state == -5 || current.state == 4)) {
//creating the glider Encrypt objectvar glideEncrypt = newGlideEncrypter();
//fetching the sys_property that contains the IAM keyvar encryptedIbmIAMKey = gs.getProperty('<Add System property name which holds the IBM IAM key (Case Sensitive)>');
//example: var encryptedKey = gs.getProperty('WorkflowAppConfigIamKey');//Decrypting the keyvar decryptedIAMKey = glideEncrypt.decrypt(encryptedIbmIAMKey);
gs.addInfoMessage("IBM KEY DECRYPTION COMPLETED");
if (Object.keys(decryptedIAMKey).length !== 0) {
gs.addInfoMessage("CHANGE REQUEST IDENTIFIED AS WORKFLOW RELATED");
//Adding the decrypted key to the IAM token generation bodyvar bodyContent = "grant_type=urn:ibm:params:oauth:grant-type:apikey&apikey=" + decryptedIAMKey;
//Making POST call to IBM IAM to generate tokenvar ibmIamTokenRequest = new sn_ws.RESTMessageV2();
ibmIamTokenRequest.setHttpMethod('POST');
ibmIamTokenRequest.setEndpoint('https://iam.cloud.ibm.com/identity/token');
ibmIamTokenRequest.setRequestBody(bodyContent);
ibmIamTokenResponse = ibmIamTokenRequest.execute();
var ibmIamTokenResponseCode = ibmIamTokenResponse.getStatusCode();
gs.addInfoMessage("IBM IAM TOKEN CREATION HTTP RESPONSE CODE: " + ibmIamTokenResponseCode);
if (ibmIamTokenResponseCode == 200) {
//parsing json response to extract the access_tokenvar ibmIamTokenResponseData = JSON.parse(ibmIamTokenResponse.getBody());
//extracting the access_tokenvar access_token = ibmIamTokenResponseData.access_token;
var encryptedInstanceId = gs.getProperty('<Add System property name which holds the AppConfig InstanceId (Case Sensitive)>');
//example: var encryptedInstanceId = gs.getProperty('WorkflowIbmAppConfigInstanceId');var decryptedInstanceId = glideEncrypt.decrypt(encryptedInstanceId);
gs.addInfoMessage("IBM APP CONFIG INSTANCE ID DECRYPTION COMPLETED");
//preparing webhook request to forwardvar webHookRequest = new sn_ws.RESTMessageV2();
//Refer link https://cloud.ibm.com/apidocs/app-configuration#endpoints-urls for more info on base URL//Choose the base url from below based on your AppConfig instance region//Dallas: https://us-south.apprapp.cloud.ibm.com//Washington DC: https://us-east.apprapp.cloud.ibm.com//London: https://eu-gb.apprapp.cloud.ibm.com//Sydney: https://au-syd.apprapp.cloud.ibm.com//Frankfurt: https://eu-de.apprapp.cloud.ibm.com//Madrid: https://eu-es.apprapp.cloud.ibm.com
webHookRequest.setEndpoint('{{AppConfigRegionBaseURL}}/apprapp/workflow/v1/instances/' + decryptedInstanceId + '/crevents');
webHookRequest.setRequestHeader('Authorization', 'Bearer ' + access_token);
webHookRequest.setHttpMethod('POST');
webHookRequest.setRequestHeader("Accept", "application/json");
webHookRequest.setRequestHeader("Content-Type", "application/json");
//preparing the data for the webhook requestvar webHookReqDataObject = newObject();
//BELOW ARE THE DATA THAT IS NEEDED TO PROCESS THE REQUEST, MODIFYING OR ALTERING THE DATA OR THE ATTRIBUTE WILL RESULT IN WEBHOOK REQUEST FAILURE.
webHookReqDataObject.operation = String(current.operation());
webHookReqDataObject.short_description = String(current.short_description);
webHookReqDataObject.change_request_id = String(current.number);
webHookReqDataObject.description = String(current.description);
webHookReqDataObject.cr_state = String(current.state);
webHookReqDataObject.cr_approval_assignment_group = String(current.assignment_group);
webHookReqDataObject.appconfiguration_tag = String(current.u_appconfiguration_tag);
webHookReqDataObject.implementation_time = String(current.work_start);
var webHookJsonStringData = JSON.stringify(webHookReqDataObject);
gs.addInfoMessage(webHookJsonStringData);
webHookRequest.setRequestBody(webHookJsonStringData);
//checking the change request has the tag, we only accept the CR with the below mentioned tag id
gs.addInfoMessage("SENDING REQUEST TO APP CONFIGURATION WEBHOOK HANDLER");
var webHookResponse = webHookRequest.execute();
httpResponseStatus = webHookResponse.getStatusCode();
gs.addInfoMessage("APP CONFIGURATION WEBHOOK HANDLER RESPONSE CODE: " + httpResponseStatus);
if (httpResponseStatus == 200) {
gs.addInfoMessage("SUCCESSFULLY EXECUTED THE WEBHOOK CALL");
} else {
//try once more
webHookResponse = webHookRequest.execute();
httpResponseStatus = webHookResponse.getStatusCode();
gs.addInfoMessage("WEBHOOK CALL RETRY STATUS CODE: " + httpResponseStatus);
gs.addInfoMessage(webHookResponse.getBody());
}
} else {
gs.addInfoMessage("IBM IAM TOKEN GENERATION FAILED");
}
} else {
gs.addInfoMessage("DECRYPTED IAM KEY IS EMPTY OR NOT FOUND");
}
} else {
gs.addInfoMessage("CR STATE : " + current.state + " CR APPCONFIGURATION TAG VALUE : " + current.u_appconfiguration_tag);
gs.addInfoMessage("CHANGE REQUEST DOES NOT BELONG TO WORKFLOW INTEGRATION OR STATE OF THE CR IS NOT VALID");
}
} catch (ex) {
var message = ex.getMessage();
gs.info(message);
}
})(current, previous);
使用 IBM IAM 令牌或 App Configuration 服务凭证的 API 密钥和 App Configuration 实例标识来修改复制的脚本。
浏览至 何时运行 选项卡，然后选中 更新 复选框。
ServiceNow - When to run tab
单击“**提交 **”保存详细信息。
如何为 Webhook 脚本添加 IBM IAM 令牌或 App Configuration 服务凭证的 API 密钥?
Webhook 脚本需要 IBM IAM 令牌用于 Webhook 调用或 App Configuration 服务凭证的 API 密钥，您可以在其中存储 API 密钥以生成令牌。
