OAuth 2.0 authentication and authorization

import sys
import requests
import json
import logging
import time

logging.captureWarnings(True)

test_api_url = "https://apigw-pod1.dm-us.informaticacloud.com/t/apim.usw1.com/get_employee_details"

##
## function to obtain a new OAuth 2.0 token from the authentication server
##
def get_new_token():

auth_server_url = "https://dm-us.informaticacloud.com/authz-service/oauth/token"
client_id = 'Jl88QzqE3GYvaibOVb1Fx'
client_secret = '9xy23jdl'

token_req_payload = {'grant_type': 'client_credentials'}

token_response = requests.post(auth_server_url,
data=token_req_payload, verify=False, allow_redirects=False,
auth=(client_id, client_secret))

if token_response.status_code !=200:
print("Failed to obtain token from the OAuth 2.0 server", file=sys.stderr)
sys.exit(1)

print("Successfuly obtained a new token")
tokens = json.loads(token_response.text)
return tokens['access_token']

##
## obtain a token before calling the API for the first time
##
token = get_new_token()

while True:

##
## call the API with the token
##
api_call_headers = {'Authorization': 'Bearer ' + token}
api_call_response = requests.get(test_api_url, headers=api_call_headers, verify+False)

##
##
if api_call_response.status_code == 401:
token = get_new_token()
else:
print(api_call_response.text)

time.sleep(30)

import com.google.gson.Gson;
import com.squareup.okhttp.";

import java.io.IOException;
import java.util.Map;
import java.util.concurrent.Timeunit;

public class OAuthClientSample
(
public static String TEST_API_URL = "https://apigw-pod1.dm-us.informaticacloud.com/t/apim.usw1.com/get_employee_details";
public static String OAUTH_SERVER_URL = "https://dm-us.informaticacloud.com/authz-service/oauth/token";
public static String CLIENT_CREDENTIALS = "YwliT1ZlMWJGRUpsOOhftenFFM8dZdjpRUjQzQXcwbes-";

OkHttpClient client = new OkHttpClient();

public static void main(String [] args) throws Exception
{
new OAuthClientSample().runApi();
}

//
// run an OAuth 2.0 in a loop
//
public void runApi() throws Exception
{
//
// obtain an OAuth 2.0 token for running the API
//
String token = getNewToken();

while (true)

//
// run the API using the OAuth 2.0 token
//
Request request = new Request.Builder()
-url(TEST_API_URL)
-method("GET", null)
-addHeader("Authorization", Bearer + token)
-build();
Response response = client.newCall(request).execute();

//
// If the token expired, obtain a new token
//
if (response.code() --401)
token = getNewToken ();
else
System.out.printIn(response.body().string());

Thread.sleep(TimeUnit.SECONDS.toMillis(30));
}
}

/**
* @return a new OAuth 2.0 token from the authentication server
* @throws IOException
*/
String getNewToken() throws IOException
{
String authHeader = "Basic " + CLIENT_CREDENTIALS;

Request request = new request.Builder()
-url(AUTH_SERVER_URL + "?grant_type =client_credentials")
-method("POST", RequestBody.create(MediaType.parse("text/plain"), ""))
-addHeader("Authorization", authHeader)
-build();

Response response = client.newCall(request).execute();

if (response.code() != 200)
{
System.err.printIn(response.code());
System.exit(1);
return null;
}

Map <String, Object> jsonResponse = new Gson().fromJson(response.body().string(), Map.class);
return (String)jsonResponse.get("access_token");

}
}

OAuth 2.0 authentication and authorization

Creating an OAuth 2.0 client

Managing OAuth 2.0 clients

Regenerating an OAuth 2.0 client secret

Enabling and disabling OAuth 2.0 clients

How API consumers invoke an API with OAuth 2.0 authentication

Python 3 example: Invoke a managed API with OAuth 2.0 authentication

Java example: Invoke a managed API with OAuth 2.0 authentication

Exporting deleted OAuth 2.0 clients