[Progress Communities] [Progress OpenEdge ABL] Forum Post: RE: oAuth2 Implementation

  • Thread starter Thread starter Michael Jacobs
  • Start date Start date
Status
Not open for further replies.
M

Michael Jacobs

Guest
Hello Andrew, Have you looked at the 12.x documentation at: docs.progress.com/.../Authenticate-using-OAuth2-and-JWT.html In there you'll find the basics for defining the types of OAuth2 tokens PASOE supports, how to configure the JWT signature keys, and pointing out which JWT claims contain the authenticated user'id, and how to authorize the token's access to your web application's URLs. The issues generally are found in the types of tokens. The different token service vendors have been found to deliver tokens with different types of payloads, not all of which PASOE can validate and obtain a user-id from. Generally we setup a client to do the OAuth2 message flow, obtain a token from the Authorization Server, and dump it for inspection. The inspection provides the clues for setting the PASOE configuration. Once you have a token in your possession, you can ask about configuration details. That help?

Continue reading...
 
Status
Not open for further replies.
Back
Top