It's all about the answers!

Ask a question
QuestionsTagsUsersBadges
Follow this question
Question details

×10,828
×5,830
×514
×35

question asked: Mar 08 '17, 8:54 a.m.
question was seen: 2,986 times
last updated: May 22 '17, 8:08 a.m.

Related questions

FAQ - How this Forum works

How to request an OAuth consumer key from jfs:oauthRequestConsumerKeyUrl?

0
Thomas Vil (11●1●1) | asked Mar 08 '17, 8:54 a.m.

Hello,

I started developing a custom OSLC adapter in order to connect my applicattion to DNG (6.0.3) as a friend, and therefore trying to understand the logic behind Jazz-specific OAuth properties, in particular jfs:oauthRequestConsumerKeyUrl. Currently i'm investigating this from a REST client. According to "Additional OAuth-related Properties in Root Services Documents" specification (https://jazz.net/wiki/bin/view/Main/RootServicesSpecAddendum2) it should be possible to make an HTTP POST to jfs:oauthRequestConsumerKeyUrl <./oauth-request-consumer> from the rootservices document with: 

   {
     "name": "consumer name",    <--- The desired name of the consumer 
     "secretType": "string",
     "secret": "secret",      <--- The desired consumer secret  
     "trusted": "false",      <--- The desired trust setting 
     "userId": "userId-name"   <--- The desired user to be associated with the consumer 
   }
as a request body. However, it doesn't work, as the request returns 403 response with an error message:

Perrmision denied.
Your account does not have the group memberships required to access the requested resource.

What is the correct HTTP call to be made in order for this to work as described in the specification? Or is there something else missing?

3 answers

Most liked answers ↑|Newest answers|Oldest answers

0
permanent link
Donald Nong (14.5k●4●14) | answered Mar 08 '17, 9:53 p.m.

The error message says that you need an appropriate repository role (very likely JazzAdmins) to complete the request. Have you verified that you have logged in and got the right role?

Comments
Thomas Vil commented Mar 09 '17, 1:28 a.m.

Yes, I'm logged in with a user that has the following roles: JazzAdmins, JazzUsers, JazzProjectAdmins.

0
permanent link
Thomas Vil (11●1●1) | answered Mar 09 '17, 2:01 a.m.

It started working after several browser session restarts and adding "X-Jazz-CSRF-Prevent" headers with JSESSIONID as a value.

0
permanent link
Lonnie VanZandt (88●5●17) | answered May 22 '17, 8:07 a.m.

I was able to get the following POST to work without the X-Jazz-CSRF-Prevent header: 



Request a Provisional ConsumerKey for Patricia, the JazzAdmin


curl -X "POST" "https://some.jazz.com:9443/jts/oauth-request-consumer"
-H "Content-Type: application/json; charset=utf-8" 
-d $'{"secret": "PatriciaConsumerSecret",
"secretType": "string",
"trusted": "false",
"name": "PatriciaConsumerName",
"userId": "patricia"}'
The server responded: 
HTTP/1.1 200 OK
X-Powered-By: Servlet/3.0
x-com-ibm-team-scenario: 216.188.237.248
Content-Type: text/json;charset=UTF-8
Content-Language: en-US
Transfer-Encoding: chunked
Connection: Close
Date: Mon, 22 May 2017 11:55:27 GMT
{"key":"scrambledeggs"}

Comments
Lonnie VanZandt commented May 22 '17, 8:08 a.m.

 Jazz.net's HTML editor is ... not the best.

Your answer

Register or to post your answer.


Dashboards and work items are no longer publicly available, so some links may be invalid. We now provide similar information through other means. Learn more here.