0
votes

We use Mulesoft currently for our middleware. I am in the process of evaluating Wso2 as a possible alternative. Our primary focus is mobile clients. For the most part we implement OAuth.

Before I give too much detail, when I register an OAuth2 app on Wso2 Identity Server 5.0.0 I am expecting to see a consumer key/id. It does NOT however display one. All I see are :

Access Token Url - https://localhost:9454/oauth2/token

Authorize Url - https://localhost:9454/oauth2/authorize.

Is there something I need to enable, or am I doing something worng ?

P.S. ( "Allowed Grant Types" are all ticked )

2

2 Answers

0
votes

When you create an OAuth app, you will get a OAuth Client Key & OAuth Client Secret at the table under Inbound Authentication Configuration ->OAuth/OpenID Connect Configuration. Please use this as the consumer key and consumer secret to obtain the access token.

creating the access token can be done as combining the consumer key and consumer secret as follows and encode it by base64.

for e.g : FNZ8oxGPxWer_2elrZBoueS4XcYa:gr0JizDbStaFelXBV06cahh7Lxga

after encoding the above looks as : Rk5aOG94R1B4V2VyXzJlbHJaQm91ZVM0WGNZYTpncjBKaXpEYlN0YUZlbFhCVjA2Y2FoaDdMeGdh

Add the encoded value as follows in the CURL command.

The below Curl command is an example on how you could use it :

curl -k -d "grant_type=password&username=admin&password=admin" -H "Authorization" -H "Authorization: Basic Rk5aOG94R1B4V2VyXzJlbHJaQm91ZVM0WGNZYTpncjBKaXpEYlN0YUZlbFhCVjA2Y2FoaDdMeGdh, Content-type=application/x-www-form-urlencoded" https://domain:9443/oauth2/token

You could also find the following useful

[1] https://docs.wso2.com/display/IS500/Configuring+Inbound+Authentication+for+a+Service+Provider

[2] http://blog.lasindu.com/2014/12/wso2-identity-server-provision-service.html

[3]https://docs.wso2.com/display/IS500/OAuth+Token+Revocation+with+WSO2+Identity+Server

Hope this helps.

Regards, Shani.

0
votes

After a couple of weeks of searching the net for support on this, to speed up the evaluation, I downloaded IS 4.6.0, completed the steps as previous and there appeared the necessary information to continue the evaluation process. I now see all the fields :

Client Id ????????????????????????

Client Secret ??????????????????????

Access Token Url - https://localhost:9454/oauth2/token

Authorize Url - https://localhost:9454/oauth2/authorize.