You are viewing a plain text version of this content. The canonical link for it is here.

Posted to dev@fineract.apache.org by Achia Rolence <ak...@gmail.com> on 2022/06/13 09:37:33 UTC

Issues enabling OAuth on Fineract 1.7

Hello to all.
I deployed the latest release but enable Oauth and disabled basic
authentication. Can anyone help with how OAuth works? How to create tokens,
how to use tokens and where is the Auth server?
Thanks and regards
Rolence

Re: Issues enabling OAuth on Fineract 1.7

Posted by Achia Rolence <ak...@gmail.com>.

Hi Developers,
I have set up Keycloak server 1.8.0 and generated an Access token but every
request made to the server has the same response. Any help would be
appreciated to point me to the right direction.
{
    "developerMessage": "Invalid authentication details were passed in api
request.",
    "httpStatusCode": "401",
    "defaultUserMessage": "Unauthenticated. Please login.",
    "userMessageGlobalisationCode": "error.msg.not.authenticated",
    "errors": []
}

Below is the Keycloak Access token response
{"access_token":"eyJhbGciOiJSUzI1NiIsInR5cCIgOiAiSldUIiwia2lkIiA6ICI1MGZoOEU5Q3R3NlZXbVRWbERxU3daOEtkSENKSEo5NUt6bWl4bUx1WnBjIn0.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.EizWyyM-mCXz4VWHhpx-YqOF8ni4UPYdN7Zerq5Yj8gaXvwN6uKuOI2e-gOUiAnl23TtFGDLVGZ-M1Fpp2x-awokVineD9Sk7HLpD_rIPIoE_4gXedNz7mjeTmGbsPv6McDoDXS6TwSBlLemoAgZ47hMi1KTbkNfygzDinoPyRYQi2YhiFsF5vxBe-F4qDzNCOd44uKlEEOXHVo8O1RWqqfIAvLIMoWA3Xqvo1xpTagVlQGAwn7eczBXFrF1m3Mx5OB2Qu0e7fB_Z53N807Y0prYafcyg3vVRWPtnRMUG3-elXrq85YgLSNrtF326z4E-DZTaMr1ogAYNt4TFb9KAg","expires_in":60,"refresh_expires_in":1800,"refresh_token":"eyJhbGciOiJIUzI1NiIsInR5cCIgOiAiSldUIiwia2lkIiA6ICJmZDM0NDcxMi1mODU0LTRjYTctYTU3YS0xOTQyNjE2N2ZlZjcifQ.eyJleHAiOjE2NTU4MjE5MjMsImlhdCI6MTY1NTgyMDEyMywianRpIjoiYzhkMzA0ZGMtN2Q0NS00MzU4LWIxMWItNmE1ZDFmMzdkYzUyIiwiaXNzIjoiaHR0cHM6Ly9rZXljbG9hay5sbmRkby5sb2FuOjg0NDMvcmVhbG1zL21hc3RlciIsImF1ZCI6Imh0dHBzOi8va2V5Y2xvYWsubG5kZG8ubG9hbjo4NDQzL3JlYWxtcy9tYXN0ZXIiLCJzdWIiOiJhZG1pbiIsInR5cCI6IlJlZnJlc2giLCJhenAiOiJjb21tdW5pdHktYXBwIiwic2Vzc2lvbl9zdGF0ZSI6IjMyYjk0ZDEzLTU1OWMtNGRmYy04YWYwLTBkNzg0N2YwOGI5MSIsInNjb3BlIjoicHJvZmlsZSBlbWFpbCIsInNpZCI6IjMyYjk0ZDEzLTU1OWMtNGRmYy04YWYwLTBkNzg0N2YwOGI5MSJ9.LiknFsEcd-qt5Nf6LgF-GS9hUK2UukVoO1KEBcbo7ec","token_type":"Bearer","not-before-policy":0,"session_state":"32b94d13-559c-4dfc-8af0-0d7847f08b91","scope":"profile
email"}

On Mon, Jun 13, 2022 at 2:27 PM Petri Tuomola <pe...@tuomola.org.invalid>
wrote:

> Hi
>
> That's actually the documentation for the pre-1.5 version Oauth that
> relied on the discontinued spring-security-oauth2 package.
>
> The documentation for the oauth support in the post-1.5 versions can be
> found here:
>
>
> https://github.com/apache/fineract/blob/develop/fineract-doc/src/docs/en/chapters/security/oauth.adoc
>
> Hope this helps!
>
> Regards
> Petri
>
>
> On Mon, Jun 13, 2022, 18:50 Awasum Yannick <aw...@apache.org> wrote:
>
>> Hi Rolence,
>>
>> Please check if the API Docs will help:
>> https://demo.mifos.io/api-docs/apiLive.htm#authenticationoauth
>>
>>
>>
>> On Mon, Jun 13, 2022 at 10:37 AM Achia Rolence <ak...@gmail.com>
>> wrote:
>>
>>> Hello to all.
>>> I deployed the latest release but enable Oauth and disabled basic
>>> authentication. Can anyone help with how OAuth works? How to create tokens,
>>> how to use tokens and where is the Auth server?
>>> Thanks and regards
>>> Rolence
>>>
>>

Re: Issues enabling OAuth on Fineract 1.7

Posted by Petri Tuomola <pe...@tuomola.org.INVALID>.

Hi

That's actually the documentation for the pre-1.5 version Oauth that relied
on the discontinued spring-security-oauth2 package.

The documentation for the oauth support in the post-1.5 versions can be
found here:

https://github.com/apache/fineract/blob/develop/fineract-doc/src/docs/en/chapters/security/oauth.adoc

Hope this helps!

Regards
Petri

On Mon, Jun 13, 2022, 18:50 Awasum Yannick <aw...@apache.org> wrote:

> Hi Rolence,
>
> Please check if the API Docs will help:
> https://demo.mifos.io/api-docs/apiLive.htm#authenticationoauth
>
>
>
> On Mon, Jun 13, 2022 at 10:37 AM Achia Rolence <ak...@gmail.com>
> wrote:
>
>> Hello to all.
>> I deployed the latest release but enable Oauth and disabled basic
>> authentication. Can anyone help with how OAuth works? How to create tokens,
>> how to use tokens and where is the Auth server?
>> Thanks and regards
>> Rolence
>>
>

Re: Issues enabling OAuth on Fineract 1.7

Posted by Awasum Yannick <aw...@apache.org>.

Hi Rolence,

Please check if the API Docs will help:
https://demo.mifos.io/api-docs/apiLive.htm#authenticationoauth



On Mon, Jun 13, 2022 at 10:37 AM Achia Rolence <ak...@gmail.com>
wrote:

> Hello to all.
> I deployed the latest release but enable Oauth and disabled basic
> authentication. Can anyone help with how OAuth works? How to create tokens,
> how to use tokens and where is the Auth server?
> Thanks and regards
> Rolence
>