Question

3
Replies
117
Views
 Sari Abdel-Latif (Sari.alatif)
Rulesware

Rulesware
CA
Sari.alatif Member since 2015 4 posts
Rulesware
Posted: January 15, 2020
Last activity: March 22, 2021
Posted: 15 Jan 2020 15:43 EST
Last activity: 22 Mar 2021 1:16 EDT

Using Access Token with API calls ( Auth0 using OIDC )

Report

We have Auth0 setup to login to the Pega environment, what's the best OOTB to reuse the access token we get back for API calls ?

Auth0 authentication service is configured with an audience parameters so it should be returning JWT format Access Token. where would this token be stored ?

Thanks,

-Sari

Pega Platform Data Integration Security
Reply
Posted: 1 year ago
Posted: 15 Jan 2020 15:46 EST
Sari Abdel-Latif (Sari.alatif)
Rulesware

Rulesware
CA
Report

I do see new Access Token instances created for "Data-Admin-Security-OAuth2-AccessToken" class with every login for a user.


Checking their content there is an "idToken" with a proper JWT format and a "pyAccessToken" value, but its format is not JWT, it's much longer than the usual Opaque tokens we'd get from Auth0. 


anyone knows what format that value is in ?


 

Reply
Posted: 11 months ago
Posted: 30 Jun 2020 16:15 EDT
Ranjith Varma Pakalapati (RanjithVarmaP)
Infosys
Lead Consultant
Infosys
NL
Report

Hi,

We have the same requirement. We need to use the Access Token for doing API calls, but the Access Token stored in the DB table is not in proper JWT format.

Please let us know if you were able to resolve this issue.

Thanks & Regards,

Ranjith

Reply