Layer7 API Management

  • Private Community
Back to discussions
Expand all | Collapse all

grant type = password v

  • 1.  grant type = password v

    Posted Dec 14, 2017 12:21 AM

    Hi,

    I am using grant_type = password



  • 2.  Re: grant type = password validating against a external system
    Best Answer

    Broadcom Employee
    Posted Dec 18, 2017 03:46 PM

    Hi Pavan,

     

    You would need to edit the 'OTK USER AUTHENTICATION'  encap. Turn on the comments and under the 'Authentication' branch you can add a new 'All assertions must evaluate to true' branch that includes the logic.

     

    If you are basing authentication solely on the HTTPresponse from passing the query parameters to the server you can do something along these lines:

     

     

    Add a route via HTTP(s) assertion (ie: to https://yourAuthServer/auth?username=admin&password=7layer).

    If ${httpRouting.reasonCode} = 200 succeed, else fail.

     

    The variable ${current.username} should also be set to the name of the user you are authenticating.

     

    Regards,

    Joe