I wanted to secure my microservices built in api connect using Oauth for that i need to use datapower as authorization server.
Is there any step by step document/example to configure API connect to use Datapower Gateway API gateway.
Any help will be appreciated.
Using the API Designer from API Connect, you can create OAuth-based security for your microservice app that uses DataPower as the OAuth provider. Are you familiar with the API Designer and the API Connect toolkit?
OAuth 2.0 is supported by the Micro Gateway only from version 5.0.3 and onwards but as you have DataPower you are fine. The interface/GUI is much better though in later versions of v5.
Did you see this: https://www.ibm.com/support/knowledgecenter/en/SSFS6T/com.ibm.apic.toolkit.doc/tutorial_apionprem_security_OAuth.html
Or this:
https://www.ibm.com/support/knowledgecenter/en/SSFS6T/com.ibm.apic.toolkit.doc/tapim_sec_api_config_scheme_oauth_endpoint.html
Check out Lab 4 here:
https://github.com/ibm-apiconnect/pot-onprem-docs/tree/master/lab-guide
The Lab software/setup is also found in that GitHub account!
Reinstalling and Configuring DataPower worked for me it concludes that there was a problem with initial configurations.
Related
i installed alfresco community edition on GCP virtual machine in linux process is done alfresco is up but I cannot connect my Alfresco community edition to google drive. how to connect alfresco with google drive?
Every request your application sends to the Drive API must include an authorization token. The token also identifies your application to Google. Your application must use OAuth 2.0 to authorize requests. No other authorization protocols are supported. If your application uses Google Sign-In, some aspects of authorization are handled for you.
Please follow the link to know better about the google drive integration.
From the documentation of "Container mode", it seems like Slack is supported: "...while the Chatbot operates as if it is connected to the Facebook Messenger Platform, to the Microsoft Bot Framework, or to the Slack API." However, I've been unable to find any specific reference to a Slack connector. Our product is a bot accessible through Slack. We're experimenting with Botium for direct API testing through the Simplerest connector, but would like to test end-to-end through the Slack interface if it exists. If not, are there plans for developing one?
There is one sample available (https://github.com/codeforequity-at/botium-core/tree/master/samples/connectors/docker/slack), and the Botium capabilities are described in the Wiki (https://github.com/codeforequity-at/botium-core/wiki/Operation-Mode-docker). It is not E2E-Testing, it's more a system test - when using Botium like this, your Slack bot is never connected to the Slack servers, everything is intercepted by Botium. If you alread have an API Test with the HTTP/JSON connector in place, then it possibly won't add much to your test strategy.
For E2E-Testing, Botium has a connector providing a framework for running Selenium and Appium tests on websites hosting a chatbot: https://github.com/codeforequity-at/botium-connector-webdriverio - never tried myself, but I guess it could be used for testing a Slack bot in the Slack ui as well.
I have a question about CloudFoundry actuator endpoints in a .net core console application using Steeltoe. I am planning to use generic host https://jmezach.github.io/2017/10/29/having-fun-with-the-.net-core-generic-host/ to perform some background task. I would like to use few actuator endpoints e.g.Health actuator. I could find samples with WebHost here https://github.com/SteeltoeOSS/Samples/blob/dev/Management/src/AspDotNetCore/CloudFoundry/Startup.cs. The below code needs IApplicationBuilder
// Add management endpoints into pipeline
app.UseCloudFoundryActuators();
So it is possible to use actuator endpoints in a console application which is hosted by generic host. Any samples are most welcome. Thanks in advance.
Steeltoe 3.0 added a variety of extensions for using Management/Actuators with HostBuilder. Check out this file for some examples.
It would also be possible to add another implementation of the actuator endpoints that communicate over something other than HTTP (perhaps RabbitMQ as an example), Steeltoe Management was built with portable base endpoint functionality in mind - but then you would also need a new application for interacting with them, and you wouldn't be able to use them with Apps Manager on PCF.
I now have a NodeJS REST API. It is CRUD service.
Does anyone know how to secure/protect my APIs step by step with wso2 OAuth2?
If you simply want to protect your REST API with OAuth2 use the WSO2 API Manager.
You can follow the quick start guide to get started.
Details related to adding your API and enabling OAuth2 protection is mentioned here in the quick start guide.
I am implementing Cloud Endpoints with a Python app, I need to expose the restAPI in a secure way https (this is authomatic), The consumer of this Endpoint will be a java Application (not a web browser or app android or ios), and my questions is if there are any way to limit the consume od this Services only for that application.
I've seen "Service Account" oauth but i don't know if i can use it for this problem and if is possible i don't know how to configure it.
Thanks a lot.