Layer7 API Management

  • 1.  oAuth token validation

    Posted Aug 14, 2017 02:29 AM

    Hi,

     

    I am getting below error in token validation through soapui

    Error : invalid_request.

    Description : Access token does not exist(expire, revoke, replaced,....)



  • 2.  Re: oAuth token validation

    Broadcom Employee
    Posted Aug 14, 2017 04:37 AM

    Hi,

     

    What is your OAuth provider ? What's the content of your request in
    SOAPUI ? What's the full message you see in SOAPUI ?

    In some experience seen over the internet, this error message can be
    returned if you are using a get instead of a POST request to the oauth
    provider

    .

    https://stackoverflow.com/questions/20934728/google-api-request-for-token-from-oauth2-returns-invalid-request-with-http-c

     

    Does SiteMinder reports any error message ?

     

    Best Regards,
    Patrick



  • 3.  Re: oAuth token validation

    Posted Aug 14, 2017 05:10 AM

    in the additlog



  • 4.  Re: oAuth token validation

    Posted Aug 14, 2017 05:11 AM

    in soapui page



  • 5.  Re: oAuth token validation

    Posted Aug 14, 2017 04:53 AM

    I shared oAuth soapui error



  • 6.  Re: oAuth token validation

    Broadcom Employee
    Posted Aug 14, 2017 10:01 AM

    Hi Balase,

     

    Are you integrating CA Gateway API with Siteminder or Federation
    Manager ? Which OAuth version are you using ?

     

    Best Regards,
    Patrick



  • 7.  Re: oAuth token validation

    Posted Aug 16, 2017 01:58 AM

    Hi Patrick,

     

    I am not integrating any one. I used  OAuth toolki  version 4.0

     

    Regards,

    Bala,



  • 8.  Re: oAuth token validation

    Broadcom Employee
    Posted Aug 16, 2017 03:35 AM

    Hi Bala,

     

    This needs to be answered by someone on CA API Management team as this
    is related to that component :

     

    https://docops.ca.com/ca-api-management-oauth-toolkit/4-0/en/release-notes

     

    I'm checking if we can find someone from this team to answer you.

    Best Regards,
    Patrick



  • 9.  Re: oAuth token validation

    Posted Aug 16, 2017 11:33 PM

    Moved to CA API Management community ..from CA Security community.



  • 10.  Re: oAuth token validation

    Broadcom Employee
    Posted Aug 20, 2017 10:01 PM

    Dear BalaSE ,

    The error indicates the token in the request is not valid.

    How did you issue the token? (used what otk endpoints?)

    What assertion in your policy to validate the token? (properties of this assertion?)

     

    You can find created tokens on Oauth Manager website (https://<your gateway>:8443/oauth/manager) -> TOKENS tab

     

    Regards,

    Mark