I'm currently experimenting with the extensions examples provided with Bonita 7.0.0. When I send a GET request on ../API/extension/demo/getExample I always get a HTTP 403 response. Of course, I've logged in before performing the request (I got HTTP 401 when I'm not logged). I'm testing it using Postman, a Chrome extension for testing REST API. I'm pretty sure it's a problem with the REST API authorization settings in Bonita, but I don't understand how it works.