Hi Michael!
Thanx a lot for Your quick reply!
It turned out, that the OAuth problem was related to the fact, that I did a "GET" instead of a "POST" request,
I fixed that.
I understand that using the API Key with the zsessionid header is not the prefrered way to access th Agile Central Web Service Api and using the OAuth approach is a more secure way.
Interestingly my user is able to create Projects when I log in to Rally via the GUI, but not when I use the Web Service Api ?! Will the OAuth approach help me i this case because I added "Full Access" to my registerd OAuth client ?
Following the OAth Samples Decription
GitHub - RallySoftware/rally-oauth-examples
tells me to first use the resoponse_type=code and afterwards use grant_type=authorization_code
Unfortunately this implies to provide a redirect-url which is not a practical way for us.
I think I will user other grant_types (password, client_credentials) to bypass this problem.
I very much appreciate any further hints, Thank You!
Regards,
Hans