Reuse Token bearer in Rest API

General
, , ,
1

Hello,

I have two rest apis, one is being used for login that generates the access token code and other api uses the same access token code to post the data.

I am trying to use the same access token code in the second rest api to post the data. How do we do this?

I tried creating a new authentication profile using OAAuth 2.0 Provider (Custom) and Grant Type (JWT Bearer) but it didn’t work.

In postman, it works as the access token code is already saved.

Authorization: Bearer Token ( is getting used in Postman)

Any idea, how do we fix it?

2

@ManishS96

Has anyone implemented this before?

3

@ManishS96

What is the grant type you have for generating token on Postman? Is it JWT Bearer?

We have used of type client credentials and we were able to re-use the same authentication profile for multiple connect RESTs. We can use the same authentication profile for multiple APIs if they also use the same authentication.

4

@ManjunathaC

We have grant type on Postman as “Token Bearer” and I have created the the authentication profile on Pega as “JWT bearer”. Will JWT work in my case or I need to use something else?

Please confirm.

5

@ManishS96 A bearer token is nothing more than a HTTP header named “Authorization” with the value “Bearer: xyz” where xyz is your token string. Postman should auto construct this for you. Look at the headers section in Postman after you enter the bearer token value in the Authentication screen.

6

@ManjunathaC

You mean prefix Bearer on the Postman Authorization header - Yes, that’s correct. (attached in the screenshot)

Will grant type “Client credentials” work?

Postman Authorization Header.PNG
Postman Authorization Header.PNG256×169 6.52 KB

7

@ManishS96
This seems you have custom token generation.
As discussed then instead of auth profile, data page can be used to store and generate the auth token.

8

@ManjunathaC

Yeah, we are using data page to map the access token code value in the second api request header as a parameter that is defined in the acitivity.

9

@ManishS96

Were you able to pass the token as part of the Authorization in Header?

We are trying to do the same, but encounter the 401 response code

10

@ManishS96

You mean prefix Bearer on the Postman Authorization header? I see only below options for grant type on OAuth2.0 Authorization:

Grant type.png
Grant type.png937×280 10.3 KB

If so then you just create an authentication profile, with Grant type as Client credentials and pass client secret and id. Please let us know if you need further help.