Workflow Server

# 1. Get a token. Endpoints are published at
#    /.well-known/openid-configuration
curl -X POST https://workflow.example.com/connect/token \
  -d "grant_type=client_credentials" \
  -d "client_id=$WFS_CLIENT_ID" \
  -d "client_secret=$WFS_CLIENT_SECRET"

# {"access_token": "...", "token_type": "Bearer", "expires_in": 3600}

# 2. Start a process for one business object
curl -X POST \
  https://workflow.example.com/workflowapi/createinstance/VacationRequest \
  -H "Authorization: Bearer $ACCESS_TOKEN"

// You register the base URL in the admin panel; Workflow
// Server calls the method names underneath it.
app.post('/callback/ExecuteAction', (req, res) => {
  const { processInstance, name, parameter, token } = req.body

  if (token !== process.env.WFS_TOKEN) return res.sendStatus(401)

  if (name === 'NotifyApprover') {
    notifyApprover(processInstance, parameter)
    // data carries back the parameters you changed
    return res.json({ success: true, data: { notified: true } })
  }

  res.json({ success: false, error: 'UnknownAction', message: name })
})

// A condition answers with a boolean, same envelope.
app.post('/callback/ExecuteCondition', (req, res) =>
  res.json({ success: true, data: needsSecondApproval(req.body) }))