Connecting to an ION API via IPA?

unknown

Does anyone know how to make a call an ION API using IPA?

I am just trying to make a simple REST call to one of the published ION API's.

I have tried using web run, but I can't figure out how to handle the OAuth required to access any of the ION API URLs.

unknown

In case anyone comes here looking for an answer, I was finally able to "solve" this.  Ideally, I still like Russel's suggestion to have development create an OAuth node or an authentication option on the Webrun node for OAuth.  In the meantime, here's a hack.

The first thing you need is an authorized app created in ION API.  When you create that you'll have an option to download the credentials.  You'll need to check "create service account" when downloading the credentials and you'll need to assign the service account to a valid IFS user that has Roles which give it access to the features that you are trying to invoke via ION API REST calls (i.e.  If you are trying to use ION API to make a call to IDM then your service account user will need to have access to IDM).  When you download the credentials you will get a .ionapi file.  This is just a JSON file with a couple of different credentials in it (ci, cs, saak, sask).  Save the file and note those values for later!

The way this works is that you'll make a call to the OAuth2 authentication service first THEN you'll make a call to the ION API URL.

So you need to create a separate webrun node that performs the authentication first. 

The "web root" for that call is:  mingle-sso.inforcloudsuite.com

The "web program" for that call is:  AVAAP_DEM/as/token.oauth2

(Where "AVAAP_DEM" is your tenant name)

The "header string" needs TWO parameters:

Content-Type: application/x-www-form-urlencoded

Authorization: Basic <!BasicAuth>

(Where <!BasicAuth> is the base64 encoded string of ci + ":" + cs)

Method is:  POST

The "post string" is: "grant_type=password" + "&username=" + URLEncoder(saak) + "&password=" + URLEncoder(sask) + "&scope="

That call is going to return a JSON string which contains the "access_token" that you'll need to include in all subsequent calls.

Sample:

{
"access_token": "eyJhb...2sSOg",
"refresh_token": "oVogO...eQv1g",
"token_type": "Bearer",
"expires_in": 7199
}

Use the JSON Parser node to extract the value of the "access_token".

Now you can make your ION API call using a webrun node.

The key piece that makes it work is that you need to include a header that looks like this:

Authorization: Bearer <!jAccessToken>

(Where <!jAccessToken> is the "access_token" value in JSON response of the OAuth call)

0712131256598360.doc