Author |
Message
|
Vitor |
Posted: Tue Sep 20, 2016 5:03 am Post subject: Calling a REST API secured with OAuth2 |
|
|
 Grand High Poobah
Joined: 11 Nov 2005 Posts: 26093 Location: Texas, USA
|
Now looking here, it very clearly says:
Quote: |
Security Scheme Objects with a type of oauth2 are not supported |
So if someone wants to call a REST API hosted outside in the cloud someplace from a flow, which the external vendor has seen fit to secure with OAuth2, what's the recommendation from the community? Do we have any samples out on GitHub or somewhere? _________________ Honesty is the best policy.
Insanity is the best defence. |
|
Back to top |
|
 |
mqjeff |
Posted: Tue Sep 20, 2016 6:02 am Post subject: |
|
|
Grand Master
Joined: 25 Jun 2008 Posts: 17447
|
I'm sure you could manipulate the SOAP Request headers using Java...
Otherwise, you basically need to implement the process flow here This can be done with basic HTTP nodes.
You may need some information from the REST service provider as to the endpoints and data needed by each flow, or otherwise if they're using some kind of implicit flow. _________________ chmod -R ugo-wx / |
|
Back to top |
|
 |
Vitor |
Posted: Tue Sep 20, 2016 6:22 am Post subject: |
|
|
 Grand High Poobah
Joined: 11 Nov 2005 Posts: 26093 Location: Texas, USA
|
mqjeff wrote: |
I'm sure you could manipulate the SOAP Request headers using Java...
 |
Funny.  _________________ Honesty is the best policy.
Insanity is the best defence. |
|
Back to top |
|
 |
timber |
Posted: Tue Sep 20, 2016 7:33 am Post subject: |
|
|
 Grand Master
Joined: 25 Aug 2015 Posts: 1292
|
Another solution would be to use API Connect to proxy the REST API. IIB has some great facilities for integrating IIB with API Connect these days. |
|
Back to top |
|
 |
emarshah |
Posted: Mon Sep 18, 2017 4:53 pm Post subject: Re: Calling a REST API secured with OAuth2 |
|
|
Newbie
Joined: 27 Feb 2010 Posts: 4
|
Vitor wrote: |
Now looking , it very clearly says:
Quote: |
Security Scheme Objects with a type of oauth2 are not supported |
So if someone wants to call a REST API hosted outside in the cloud someplace from a flow, which the external vendor has seen fit to secure with OAuth2, what's the recommendation from the community? Do we have any samples out on GitHub or somewhere? |
Did you get any solution using IIB REST nodes? Now i am faced with similar situation. Thanks. |
|
Back to top |
|
 |
Vitor |
Posted: Tue Sep 19, 2017 4:54 am Post subject: Re: Calling a REST API secured with OAuth2 |
|
|
 Grand High Poobah
Joined: 11 Nov 2005 Posts: 26093 Location: Texas, USA
|
emarshah wrote: |
Vitor wrote: |
Now looking , it very clearly says:
Quote: |
Security Scheme Objects with a type of oauth2 are not supported |
So if someone wants to call a REST API hosted outside in the cloud someplace from a flow, which the external vendor has seen fit to secure with OAuth2, what's the recommendation from the community? Do we have any samples out on GitHub or somewhere? |
Did you get any solution using IIB REST nodes? Now i am faced with similar situation. Thanks. |
We went with @timber's suggestion and used API Connect _________________ Honesty is the best policy.
Insanity is the best defence. |
|
Back to top |
|
 |
emarshah |
Posted: Tue Sep 19, 2017 1:50 pm Post subject: Re: Calling a REST API secured with OAuth2 |
|
|
Newbie
Joined: 27 Feb 2010 Posts: 4
|
Vitor wrote: |
emarshah wrote: |
Vitor wrote: |
Now looking , it very clearly says:
Quote: |
Security Scheme Objects with a type of oauth2 are not supported |
So if someone wants to call a REST API hosted outside in the cloud someplace from a flow, which the external vendor has seen fit to secure with OAuth2, what's the recommendation from the community? Do we have any samples out on GitHub or somewhere? |
Did you get any solution using IIB REST nodes? Now i am faced with similar situation. Thanks. |
We went with @timber's suggestion and used API Connect |
We are not using API Connect at the moment, was wondering as REST nodes don't support oauth2 but can we use oauth1 (though its deprecated)? As per documentation we can pass APIkey as mqsiproperty but couldn't see any information on providing "secret" to the properties. Any answer will be appreciated! |
|
Back to top |
|
 |
mqjeff |
Posted: Wed Sep 20, 2017 3:20 am Post subject: |
|
|
Grand Master
Joined: 25 Jun 2008 Posts: 17447
|
Upgrade to the latest version/fixpack?
Open a PMR?
Use the HTTP nodes instead of the REST nodes? _________________ chmod -R ugo-wx / |
|
Back to top |
|
 |
sudheer7700 |
Posted: Fri Oct 27, 2017 2:29 am Post subject: |
|
|
Novice
Joined: 01 Feb 2017 Posts: 17
|
We can use blueMix to create API with Oauth 2.0. I done similar scenario by IIB10 and BlueMix. I passed Token from IIB-request and Got response back. |
|
Back to top |
|
 |
|