wso2-am

WSO2 API Manager, is it possible to disable the access-token mechanism

由 梦想与她 提交于 2019-12-01 11:38:55
问题 Is it possible to disable the access-token mechanism in WSO2 API Manager? So we do not have to set the authentication bearer header .I know I can set the access-token time-out to -1 seconds, to make it endless. 回答1: Yes You can. WSO2 API Manager provides resource level authentication where you can specify the authentication mechanism for each HTTP verb. If you set it to 'None', then you do not need to set Authorization headers when you call the API. As given in the document[1],when creating

WSO2 api manager gateway cluster configuration

由 自作多情 提交于 2019-12-01 07:28:38
问题 While attempting to create a cluster for my API Manager I'm confused on some of the documentation. Here is the architecture: MS SQL Server as the database. Single node VM that runs both the Publisher and the Store. 2 additional nodes that run the gateway and key manager. The documentation says to install the different components by copying the same install over and over...but that doesn't make sense to me. I want the publisher and store to run together (just like a stand alone), and I want

Error while trying to connect to the endpoint. Cannot borrow client for ssl

由 百般思念 提交于 2019-12-01 04:48:21
This error is being printed in the WSO2 API Manager wso2carbon.log.. sun.security.ssl.SSLSocketFactoryImpl.createSocket(SSLSocketFactoryImpl.java:88) at org.wso2.carbon.databridge.agent.endpoint.binary.BinarySecureClientPoolFactory.createClient(BinarySecureClientPoolFactory.java:53) ... 9 more TID: [-1] [] [2016-12-28 22:16:04,043] ERROR {org.wso2.carbon.databridge.agent.endpoint.DataEndpointConnectionWorker} - Error while trying to connect to the endpoint. Cannot borrow client for ssl://192.168.1.36:9711 {org.wso2.carbon.databridge.agent.endpoint.DataEndpointConnectionWorker} org.wso2.carbon

Difference between grant_type=client_credentials and grant_type=password in Authentication Flow?

由 时光毁灭记忆、已成空白 提交于 2019-12-01 01:03:16
问题 I would like to understand the difference between grant_type=client_credentials and grant_type=password in Authentication or in OAuth2 Flow concept. I am following below sites: http://help.atavist.com/api:authentication http://apiwiki.poken.com/authentication/oauth2 I presume grant_type=password in not secure way as far as using gran_type in JavaScript development. But I still wounder can someone help to understand this concept. I also observe that grant_type=client_credentials doesn't

getPayloadJSON returning an empty object

由 折月煮酒 提交于 2019-11-30 23:44:50
I am doing some very simple script mediation as a test to see if I can change the payload being returned by my server. My unmediated payload comes out as: {"origin":"202.37.75.130"} Then I try doing a very simple check to see whether get and set work for payloads: <script language="js"> var older = mc.getPayloadJSON(); var newer=older; mc.setPayloadJSON(newer); </script> My result from this is: {"jsonObject":""} I have done testing that shows that setPayloadJSON() works, which means that my getPayloadJSON must be returning an empty object. Looking at the log file shows this: ERROR {org.apache

Unable to access XACML policy in wso2is-5.6.0 from wso2am-2.5.0 getting error

由 五迷三道 提交于 2019-11-29 18:03:09
i following link Created XACML policy in wso2is. Accessing from wso2AM created one POST type function. While sending request in wso2AM store getting an error I have update "jndi.properties" file by commenting second "/test" url line. After that i am getting error. ERROR - EntitlementMediator Error occurred while evaluating the policy org.wso2.carbon.identity.entitlement.proxy.exception.EntitlementProxyException: Cannot initialize EntitlementServiceStub with null Axis2 configuration context. at org.wso2.carbon.identity.entitlement.proxy.soap.basicAuth.BasicAuthEntitlementServiceClient

java.security.cert.CertificateException: No subject alternative names present;

由 ≯℡__Kan透↙ 提交于 2019-11-29 10:23:06
问题 I am using WSO2 API Manager version 1.9.1 . In this tool, I publish my sample project (i.e., proxied ) and subscribe that project to get consumer key and secret. This tool also gives me CURL command which works fine. The below CURL command which runs fine. curl -k -d "grant_type=password&username=XXXXX&password=XXXXX" -H "Authorization: Basic XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX, Content-Type: application/x-www-form-urlencoded" https://XXXXXXXXXXX:XXXX/token Now I'm

Add header with username into request to backend in wso2 apimanager

由 放肆的年华 提交于 2019-11-29 08:40:58
I have apimanger v1.5.0. It authorize request by access_token and forward to backend. Backend need enduser name for processing request. I do not want add JWT-headers to request because that insecure. Apimanager can add optional headers to request, if add to file repository/deployment/server/synapse-configs/default/api/admin--common_v1.0.1.xml in section <outSequence><header> some data for example uri.var.accessToken . But I dont know name of variable with enduser name. Does somebody know? Variable name is END_USER_NAME. Example of use: <inSequence> <property name="POST_TO_URI" value="true"

WSO2 API Manager CORS

由 纵饮孤独 提交于 2019-11-28 13:44:50
I'd like to enable CORS on my WSO2 API Manager instance for all endpoints. I've been through the documentation (which is great) and it suggests altering the repository/conf/api-manager.xml file as there is a CORS configuration node within it (below). <!--Configuration to enable/disable sending CORS headers in the Gateway response and define the Access-Control-Allow-Origin header value.--> <CORSConfiguration> <!--Configuration to enable/disable sending CORS headers from the Gateway--> <Enabled>true</Enabled> <!--The value of the Access-Control-Allow-Origin header. Default values are API Store

Multipart form data file upload using WSO2 API manager?

由 ⅰ亾dé卋堺 提交于 2019-11-28 11:41:57
I have rest service to upload files and it is working fine.Now I created API in API manager and also given the same file upload service as the production endpoint. But now I am getting an error in my backed server while uploading the file using API manager endpoint. I got the solution,Need to enable Binary Relay builders in axis2.xml file to use the multipart/form-data message formatting and also ensure that there is no custom header with request to handle multipart data. <messageBuilder contentType="multipart/form-data" class="org.wso2.carbon.relay.BinaryRelayBuilder"/> <messageFormatter
订阅 wso2-am