topic How to call Alfresco Rest API's using OAuth instead of using Basic Auth? in Alfresco Forum

How to call Alfresco Rest API's using OAuth instead of using Basic Auth?

talape_deepak — Tue, 06 Jul 2021 12:11:08 GMT

I have to integrate my external application with Alfresco using Alfresco Rest API's, Where I have to call these API's from my custom java microservices using OAuth/OAuth 2.0 instead of using Basic Auth. (There is a separate service account in AD which I have to use for calling ACS rest API's)

Please let me know, how can I get the Auth Tokens for my service account user, so I can pass those tokens while calling rest API.

Alfresco Version: Alfresco Content Service 6.2.2 (Enterprise Edition)

Re: How to call Alfresco Rest API's using OAuth instead of using Basic Auth?

ilseva — Tue, 06 Jul 2021 13:11:18 GMT

You have to use Identity Service.

Look at https://docs.google.com/document/d/e/2PACX-1vR0gPSSBzfA4-J-ncau6gHolRKk7sBXkiiTufJQ5cQRJED05fea9l5FpkYrEFKJm_MjF7fwrQ-u6AFg/pub#h.cjgd5xxfs6bq

Re: How to call Alfresco Rest API's using OAuth instead of using Basic Auth?

talape_deepak — Tue, 06 Jul 2021 17:50:52 GMT

@ilseva Thanks for the quick response.

Actually, we have already configured the identity service with keycloak, and all the AD user's are able to login to ACS Share using SSO.

But, I am not understanding which URL's I have to use for getting auth token before calling the ACS rest API from external application.

Can you please share the API urls to get the auth token and the sequence in which I have to call them before calling Actual Alfresco API.

If possible, please share the exact url which i can use from postman to get auth token's and later I can use those auth tokens to call Alfresco API.

Any suggestions or inputs will be really appreciated.

Thanks in Advance.

Re: How to call Alfresco Rest API's using OAuth instead of using Basic Auth?

ilseva — Wed, 07 Jul 2021 07:15:58 GMT

I think that the URL you have to call to obtain the token has nothing to do with alfresco.

You have to use Keycloak API: https://www.keycloak.org/docs/latest/authorization_services/#_service_overview

Re: How to call Alfresco Rest API's using OAuth instead of using Basic Auth?

steve_savini — Mon, 06 Mar 2023 15:07:17 GMT

I'm struggling with same dilemma. We have SSO configured and working for both Share and ADW to use two factor authentication for our user accounts. But, the only way I can figure out to connect to REST API is to use an INTERNAL Aflresco account and Basic Authorization (single factor authentication; ID and password only).

Have you figured out a way to connect to REST API through external authentication?

Support suggested using the ticket mechanism, but you have to make an API call to get the ticket and pass ID/password. I can't authenticate with my external user account with just ID/password; it requires 2FA through SSO.