wso2-am

WSO2 API Manager and XACML Entitlement

六眼飞鱼酱① 提交于 2019-12-10 19:44:01
问题 I'm investigating the possibility to use WSO2 API Manager 1.0 for creating an API Store to be used internally in my company; and I'm trying to figure out if it fits all requirements. In particular I would like to understand if it is possible to use a mechanism of entitlement of the API access based on XACML policies: I found several articles describing how to implement "XACML Fine Grained Authorization" using the WSO2 ESB and the WSO2 IS. So my question is if it possible (and how) to

How to set tenant to header in mediator with WSO2 API Manager

自作多情 提交于 2019-12-10 03:43:57
问题 I have an API that requires the tenant as a header. If I create a custom in-sequence: <sequence name="WSO2AM--Ext--In"> <header name="X-Tenant-Id" scope="transport" action="set" expression="???????????????????" /> </sequence> Is there an expression that I can use to achieve this? Or should I resort to creating a per-API mediator to set it? PS: Looking at WSO2 source code (CarbonTenantInfoConfigurator.java), I found this fragment that could be useful as a hint: PrivilegedCarbonContext cc =

WSO2 - Identity Server and API Manager working together

不打扰是莪最后的温柔 提交于 2019-12-09 06:46:24
问题 I'm evaluating WSO2 Identity Server and WSO2 API Manager. I registered an API and an application on API Manager. I can call the resources successfully. I could also add an user into Identity Server and log into that using oAuth authentication. But, it's not too clear how I can use those two systems together. I would like to use API Manager to expose my API's to some applications. And, I would like to use Identity Server to log the final user. Is that possible? How can I "plug" those two

How to access response payload content from custom handler in WSO2 APIM 1.9

旧巷老猫 提交于 2019-12-08 20:58:28
How to access response payload content from custom handler in WSO2 APIM? I tried get this from org.apache.synapse.MessageContext or from org.apache.synapse.core.axis2.Axis2MessageContext; but I am not able get the response payload. Can anyone please help? You need to build the message inside you handler before reading the payload, as shown below. public boolean handleResponse(MessageContext messageContext) { try { RelayUtils.buildMessage(((Axis2MessageContext) messageContext).getAxis2MessageContext()); } catch (IOException e) { e.printStackTrace(); } catch (XMLStreamException e) { e

WSO2 API Manager 1.8 - Trying out XACML - Error creating the policy

微笑、不失礼 提交于 2019-12-08 19:56:28
I am trying to see how XACML can be used with the API Manager for controlling access to some of the resources. I have followed the blog post here, http://wso2.com/library/articles/2014/02/use-of-wso2-api-manager-to-validate-fine-grained-policy-decisions-using-xacml/ I have also tried following one more post from the following link, http://niranjankaru.blogspot.fr/2014/11/user-role-based-access-to-api-using.html Also, I have gone through most of the Stackoverflow question regarding this topic. The following are my questions, Are the versions of the "XACML (4.2.2)" and "XACML Mediation (4.2.2)"

wso2_carbon_db across different wso2 product, should it be same db?

妖精的绣舞 提交于 2019-12-08 09:54:23
问题 I have installed WSO2 API Manager and WSO2 Business Process Server. Both product has wso2_carbon_db, so my question is whether both product should be configured with single db_instance of wso2_carbon_db ? or they should be configured with two different db_instance such as am_wso2_carbon_db and bps_wso2_carbon_db ?? please advice. I am using PostgresSql as db. thanks. 回答1: wso2_carbon_db should not be shared among different instances. It consists of instance local information. Sharing it among

Unable to create Access token grant type in wso2 API manager store to test API

非 Y 不嫁゛ 提交于 2019-12-08 09:08:27
I am following this link Read this paragraph "The API is now available in the API Store and ...." Am working on window in this paragraph they are saying create Access token "curl" command. But i am unable to do that. Also am creating access token after subscribe API In "MY Subscription" tab there are two option to create Access token "Production" and "Sandbox" but by using that token API calling giving error. " 900910 The access token does not allow you to access the requested resource Access failure for API: /accessPolicy/v1.0.0, version: v1.0.0 with key: e2dc44322fe78bb7bdb6d83519ff863e "

WSO2 API Manager authentication Violation of UNIQUE KEY constraint error

久未见 提交于 2019-12-08 05:30:17
问题 We have implemented WSO2 API Manager (v1.10.0) in a distributed architecture as outlined in the online documentation here. This consists of the following (on 5 separate servers): Gateway (x2) Publisher & Store (on a single server) Key Manager (x2) These are wired-up to the 3 normal API Manager databases (Registry, User Manager & API Manager), which are on a SQL Server 2014 instance. We are using the Key Managers for the authentication (login, forgotten password, etc.) of the website users, as

WSO2 API PayloadFactory mediator XML array to JSON array

好久不见. 提交于 2019-12-08 05:13:26
I am trying to build a Proxy between a client and a server using WSO2-AM. The ultimate goal is changing the content of the response the server sends to a format that the client understands. Therefore I wrote a custom mediator using a PayloadFactory. This works OK when the server sends just 1 element, but it can be possible that the servers sends multiple elements. I am trying to use an iterator to iterate all the elements and aplying a payloadfactory to each element, but this only returns the first element, or (when the response of the server is enclosed with a root element) the last element.

Unable to create Access token grant type in wso2 API manager store to test API

拟墨画扇 提交于 2019-12-08 05:02:49
问题 I am following this link Read this paragraph "The API is now available in the API Store and ...." Am working on window in this paragraph they are saying create Access token "curl" command. But i am unable to do that. Also am creating access token after subscribe API In "MY Subscription" tab there are two option to create Access token "Production" and "Sandbox" but by using that token API calling giving error. " 900910 The access token does not allow you to access the requested resource Access