How Do I implement datapower to backend API with OAUTH 1.0. Backend ? My application is trying to integrate the mastercard endpoint with OAUTH 1.0. I have the private key and consumer key. How can i generate the AUthorization OAUTH header and send it to backend? 

Authorization: OAuth    oauth_body_hash="94cOcstEzvTvyBcNV94PCbo1b5IA35XgPf5dWR4OamU=",    oauth_nonce="32lqGrI0f0nQEW85",    oauth_signature="MhfaStcHU0vlIoeaBLuP14(...)qqd99lI56XuCk8RM5dDA%3D%3D",    oauth_consumer_key="aXqayIybNdwMnzGIZMAkQYSq(...)139a87746d5b00000000000000",    oauth_signature_method="RSA-SHA256",    oauth_timestamp="1558370962",    oauth_version="1.0"

Mastercard Developers

It is difficult to guide you because there are many ways, but what are you working with on your side?  API (API Connect), MPGW, or other service?

Do you prefer doing this by config, xslt or gatewayscript?

How Do I implement datapower to backend API with OAUTH 1.0. Backend ? My application is trying to integrate the mastercard endpoint with OAUTH 1.0. I have the private key and consumer key. How can i generate the AUthorization OAUTH header and send it to backend? 

Authorization: OAuth    oauth_body_hash="94cOcstEzvTvyBcNV94PCbo1b5IA35XgPf5dWR4OamU=",    oauth_nonce="32lqGrI0f0nQEW85",    oauth_signature="MhfaStcHU0vlIoeaBLuP14(...)qqd99lI56XuCk8RM5dDA%3D%3D",    oauth_consumer_key="aXqayIybNdwMnzGIZMAkQYSq(...)139a87746d5b00000000000000",    oauth_signature_method="RSA-SHA256",    oauth_timestamp="1558370962",    oauth_version="1.0"

Mastercard Developers

Using DataPower MPGW and xslt. Is it achievable ? 

It is difficult to guide you because there are many ways, but what are you working with on your side?  API (API Connect), MPGW, or other service?

Do you prefer doing this by config, xslt or gatewayscript?

How Do I implement datapower to backend API with OAUTH 1.0. Backend ? My application is trying to integrate the mastercard endpoint with OAUTH 1.0. I have the private key and consumer key. How can i generate the AUthorization OAUTH header and send it to backend? 

Authorization: OAuth    oauth_body_hash="94cOcstEzvTvyBcNV94PCbo1b5IA35XgPf5dWR4OamU=",    oauth_nonce="32lqGrI0f0nQEW85",    oauth_signature="MhfaStcHU0vlIoeaBLuP14(...)qqd99lI56XuCk8RM5dDA%3D%3D",    oauth_consumer_key="aXqayIybNdwMnzGIZMAkQYSq(...)139a87746d5b00000000000000",    oauth_signature_method="RSA-SHA256",    oauth_timestamp="1558370962",    oauth_version="1.0"

Mastercard Developers

Have you tried concatenating together the elements of the header value into a string and then just using the 'set-http-request-header' function such that the name is "Authorization" and the value is the value of the string?

Using DataPower MPGW and xslt. Is it achievable ? 

It is difficult to guide you because there are many ways, but what are you working with on your side?  API (API Connect), MPGW, or other service?

Do you prefer doing this by config, xslt or gatewayscript?

How Do I implement datapower to backend API with OAUTH 1.0. Backend ? My application is trying to integrate the mastercard endpoint with OAUTH 1.0. I have the private key and consumer key. How can i generate the AUthorization OAUTH header and send it to backend? 

Authorization: OAuth    oauth_body_hash="94cOcstEzvTvyBcNV94PCbo1b5IA35XgPf5dWR4OamU=",    oauth_nonce="32lqGrI0f0nQEW85",    oauth_signature="MhfaStcHU0vlIoeaBLuP14(...)qqd99lI56XuCk8RM5dDA%3D%3D",    oauth_consumer_key="aXqayIybNdwMnzGIZMAkQYSq(...)139a87746d5b00000000000000",    oauth_signature_method="RSA-SHA256",    oauth_timestamp="1558370962",    oauth_version="1.0"

Mastercard Developers

I can try but how do I get the dynamic values for below ? do I need to use dp function? 

oauth_nonce="32lqGrI0f0nQEW85",

oauth_signature="MhfaStcHU0vlIoeaBLuP14(...)qqd99lI56XuCk8RM5dDA%3D%3D",

oauth_body_hash="94cOcstEzvTvyBcNV94PCbo1b5IA35XgPf5dWR4OamU=",    

Have you tried concatenating together the elements of the header value into a string and then just using the 'set-http-request-header' function such that the name is "Authorization" and the value is the value of the string?

Using DataPower MPGW and xslt. Is it achievable ? 

It is difficult to guide you because there are many ways, but what are you working with on your side?  API (API Connect), MPGW, or other service?

Do you prefer doing this by config, xslt or gatewayscript?

How Do I implement datapower to backend API with OAUTH 1.0. Backend ? My application is trying to integrate the mastercard endpoint with OAUTH 1.0. I have the private key and consumer key. How can i generate the AUthorization OAUTH header and send it to backend? 

Authorization: OAuth    oauth_body_hash="94cOcstEzvTvyBcNV94PCbo1b5IA35XgPf5dWR4OamU=",    oauth_nonce="32lqGrI0f0nQEW85",    oauth_signature="MhfaStcHU0vlIoeaBLuP14(...)qqd99lI56XuCk8RM5dDA%3D%3D",    oauth_consumer_key="aXqayIybNdwMnzGIZMAkQYSq(...)139a87746d5b00000000000000",    oauth_signature_method="RSA-SHA256",    oauth_timestamp="1558370962",    oauth_version="1.0"

Mastercard Developers

It can still be complicated based upon the expected OAuth protocol.

Take a look at these documents on setting up OAuth client profiles. 

https://www.ibm.com/docs/en/datapower-gateway/10.6.0?topic=profiles-profile-only-authorization-server-endpoints

This is likely the way you want to go.

I can try but how do I get the dynamic values for below ? do I need to use dp function? 

oauth_nonce="32lqGrI0f0nQEW85",

oauth_signature="MhfaStcHU0vlIoeaBLuP14(...)qqd99lI56XuCk8RM5dDA%3D%3D",

oauth_body_hash="94cOcstEzvTvyBcNV94PCbo1b5IA35XgPf5dWR4OamU=",    

Have you tried concatenating together the elements of the header value into a string and then just using the 'set-http-request-header' function such that the name is "Authorization" and the value is the value of the string?

Using DataPower MPGW and xslt. Is it achievable ? 

It is difficult to guide you because there are many ways, but what are you working with on your side?  API (API Connect), MPGW, or other service?

Do you prefer doing this by config, xslt or gatewayscript?

How Do I implement datapower to backend API with OAUTH 1.0. Backend ? My application is trying to integrate the mastercard endpoint with OAUTH 1.0. I have the private key and consumer key. How can i generate the AUthorization OAUTH header and send it to backend? 

Authorization: OAuth    oauth_body_hash="94cOcstEzvTvyBcNV94PCbo1b5IA35XgPf5dWR4OamU=",    oauth_nonce="32lqGrI0f0nQEW85",    oauth_signature="MhfaStcHU0vlIoeaBLuP14(...)qqd99lI56XuCk8RM5dDA%3D%3D",    oauth_consumer_key="aXqayIybNdwMnzGIZMAkQYSq(...)139a87746d5b00000000000000",    oauth_signature_method="RSA-SHA256",    oauth_timestamp="1558370962",    oauth_version="1.0"

Mastercard Developers

It can still be complicated based upon the expected OAuth protocol.

Take a look at these documents on setting up OAuth client profiles. 

https://www.ibm.com/docs/en/datapower-gateway/10.6.0?topic=profiles-profile-only-authorization-server-endpoints

This is likely the way you want to go.

I can try but how do I get the dynamic values for below ? do I need to use dp function? 

oauth_nonce="32lqGrI0f0nQEW85",

oauth_signature="MhfaStcHU0vlIoeaBLuP14(...)qqd99lI56XuCk8RM5dDA%3D%3D",

oauth_body_hash="94cOcstEzvTvyBcNV94PCbo1b5IA35XgPf5dWR4OamU=",    

Have you tried concatenating together the elements of the header value into a string and then just using the 'set-http-request-header' function such that the name is "Authorization" and the value is the value of the string?

Using DataPower MPGW and xslt. Is it achievable ? 

It is difficult to guide you because there are many ways, but what are you working with on your side?  API (API Connect), MPGW, or other service?

Do you prefer doing this by config, xslt or gatewayscript?

How Do I implement datapower to backend API with OAUTH 1.0. Backend ? My application is trying to integrate the mastercard endpoint with OAUTH 1.0. I have the private key and consumer key. How can i generate the AUthorization OAUTH header and send it to backend? 

Authorization: OAuth    oauth_body_hash="94cOcstEzvTvyBcNV94PCbo1b5IA35XgPf5dWR4OamU=",    oauth_nonce="32lqGrI0f0nQEW85",    oauth_signature="MhfaStcHU0vlIoeaBLuP14(...)qqd99lI56XuCk8RM5dDA%3D%3D",    oauth_consumer_key="aXqayIybNdwMnzGIZMAkQYSq(...)139a87746d5b00000000000000",    oauth_signature_method="RSA-SHA256",    oauth_timestamp="1558370962",    oauth_version="1.0"

Mastercard Developers

Hello Joseph, can you please help me? This is an urgent requirement. The link you provided is when DataPower acts as server. in my scenario DataPower acts as client and Mastercard is backend. DataPower should send Oauth Authorization Header to Mastercard. 

It can still be complicated based upon the expected OAuth protocol.

Take a look at these documents on setting up OAuth client profiles. 

https://www.ibm.com/docs/en/datapower-gateway/10.6.0?topic=profiles-profile-only-authorization-server-endpoints

This is likely the way you want to go.

I can try but how do I get the dynamic values for below ? do I need to use dp function? 

oauth_nonce="32lqGrI0f0nQEW85",

oauth_signature="MhfaStcHU0vlIoeaBLuP14(...)qqd99lI56XuCk8RM5dDA%3D%3D",

oauth_body_hash="94cOcstEzvTvyBcNV94PCbo1b5IA35XgPf5dWR4OamU=",    

Have you tried concatenating together the elements of the header value into a string and then just using the 'set-http-request-header' function such that the name is "Authorization" and the value is the value of the string?

Using DataPower MPGW and xslt. Is it achievable ? 

It is difficult to guide you because there are many ways, but what are you working with on your side?  API (API Connect), MPGW, or other service?

Do you prefer doing this by config, xslt or gatewayscript?

How Do I implement datapower to backend API with OAUTH 1.0. Backend ? My application is trying to integrate the mastercard endpoint with OAUTH 1.0. I have the private key and consumer key. How can i generate the AUthorization OAUTH header and send it to backend? 

Authorization: OAuth    oauth_body_hash="94cOcstEzvTvyBcNV94PCbo1b5IA35XgPf5dWR4OamU=",    oauth_nonce="32lqGrI0f0nQEW85",    oauth_signature="MhfaStcHU0vlIoeaBLuP14(...)qqd99lI56XuCk8RM5dDA%3D%3D",    oauth_consumer_key="aXqayIybNdwMnzGIZMAkQYSq(...)139a87746d5b00000000000000",    oauth_signature_method="RSA-SHA256",    oauth_timestamp="1558370962",    oauth_version="1.0"

Mastercard Developers

So, based upon what little information about this I have, I'm believing you can implement an AAA policy to generate what you need, but you may also have to route through a WTS service to get it as well.   Take a look at this, and you can see why we really cannot fully answer your question:

https://www.ibm.com/docs/en/datapower-gateway/10.6.x?topic=processing-oauth-protocol-support

I'm hoping someone who has actually done this with MasterCard would provide suggestions, but, maybe you are the first!

Hello Joseph, can you please help me? This is an urgent requirement. The link you provided is when DataPower acts as server. in my scenario DataPower acts as client and Mastercard is backend. DataPower should send Oauth Authorization Header to Mastercard. 

It can still be complicated based upon the expected OAuth protocol.

Take a look at these documents on setting up OAuth client profiles. 

https://www.ibm.com/docs/en/datapower-gateway/10.6.0?topic=profiles-profile-only-authorization-server-endpoints

This is likely the way you want to go.

I can try but how do I get the dynamic values for below ? do I need to use dp function? 

oauth_nonce="32lqGrI0f0nQEW85",

oauth_signature="MhfaStcHU0vlIoeaBLuP14(...)qqd99lI56XuCk8RM5dDA%3D%3D",

oauth_body_hash="94cOcstEzvTvyBcNV94PCbo1b5IA35XgPf5dWR4OamU=",    

Have you tried concatenating together the elements of the header value into a string and then just using the 'set-http-request-header' function such that the name is "Authorization" and the value is the value of the string?

Using DataPower MPGW and xslt. Is it achievable ? 

It is difficult to guide you because there are many ways, but what are you working with on your side?  API (API Connect), MPGW, or other service?

Do you prefer doing this by config, xslt or gatewayscript?

How Do I implement datapower to backend API with OAUTH 1.0. Backend ? My application is trying to integrate the mastercard endpoint with OAUTH 1.0. I have the private key and consumer key. How can i generate the AUthorization OAUTH header and send it to backend? 

Authorization: OAuth    oauth_body_hash="94cOcstEzvTvyBcNV94PCbo1b5IA35XgPf5dWR4OamU=",    oauth_nonce="32lqGrI0f0nQEW85",    oauth_signature="MhfaStcHU0vlIoeaBLuP14(...)qqd99lI56XuCk8RM5dDA%3D%3D",    oauth_consumer_key="aXqayIybNdwMnzGIZMAkQYSq(...)139a87746d5b00000000000000",    oauth_signature_method="RSA-SHA256",    oauth_timestamp="1558370962",    oauth_version="1.0"

Mastercard Developers

Hello Joseph, I believe AAA policy is between client and DataPower but not DataPower and Backend. Please correct me if I am wrong. Is it possible in DataPower to integrate with DataPower and backend with Oauth1.0 ? 

So, based upon what little information about this I have, I'm believing you can implement an AAA policy to generate what you need, but you may also have to route through a WTS service to get it as well.   Take a look at this, and you can see why we really cannot fully answer your question:

https://www.ibm.com/docs/en/datapower-gateway/10.6.x?topic=processing-oauth-protocol-support

I'm hoping someone who has actually done this with MasterCard would provide suggestions, but, maybe you are the first!

Hello Joseph, can you please help me? This is an urgent requirement. The link you provided is when DataPower acts as server. in my scenario DataPower acts as client and Mastercard is backend. DataPower should send Oauth Authorization Header to Mastercard. 

It can still be complicated based upon the expected OAuth protocol.

Take a look at these documents on setting up OAuth client profiles. 

https://www.ibm.com/docs/en/datapower-gateway/10.6.0?topic=profiles-profile-only-authorization-server-endpoints

This is likely the way you want to go.

I can try but how do I get the dynamic values for below ? do I need to use dp function? 

oauth_nonce="32lqGrI0f0nQEW85",

oauth_signature="MhfaStcHU0vlIoeaBLuP14(...)qqd99lI56XuCk8RM5dDA%3D%3D",

oauth_body_hash="94cOcstEzvTvyBcNV94PCbo1b5IA35XgPf5dWR4OamU=",    

Have you tried concatenating together the elements of the header value into a string and then just using the 'set-http-request-header' function such that the name is "Authorization" and the value is the value of the string?

Using DataPower MPGW and xslt. Is it achievable ? 

It is difficult to guide you because there are many ways, but what are you working with on your side?  API (API Connect), MPGW, or other service?

Do you prefer doing this by config, xslt or gatewayscript?

How Do I implement datapower to backend API with OAUTH 1.0. Backend ? My application is trying to integrate the mastercard endpoint with OAUTH 1.0. I have the private key and consumer key. How can i generate the AUthorization OAUTH header and send it to backend? 

Authorization: OAuth    oauth_body_hash="94cOcstEzvTvyBcNV94PCbo1b5IA35XgPf5dWR4OamU=",    oauth_nonce="32lqGrI0f0nQEW85",    oauth_signature="MhfaStcHU0vlIoeaBLuP14(...)qqd99lI56XuCk8RM5dDA%3D%3D",    oauth_consumer_key="aXqayIybNdwMnzGIZMAkQYSq(...)139a87746d5b00000000000000",    oauth_signature_method="RSA-SHA256",    oauth_timestamp="1558370962",    oauth_version="1.0"

Mastercard Developers

Well, generally speaking, yes.  But, again, you really haven't explained the full end to end.

What I'm gathering is you want to use DataPower to work OAuth to MasterCard on behalf of .... whom?

That is, generally speaking, when OAuth is at play, something or someone (DataPower?) is acting on behalf of another (DataPower's client?) for access to the owner's resource (Mastercard account?). What, then, is DataPower doing for the user?  

Keep in mind:   DataPower as a proxy for the user is not the same as participating in some kind of transaction between the client and two other parties, once of which is MasterCard.

What is the design of the service where DataPower has to negotiate OAuth on behalf of the client?

Hello Joseph, I believe AAA policy is between client and DataPower but not DataPower and Backend. Please correct me if I am wrong. Is it possible in DataPower to integrate with DataPower and backend with Oauth1.0 ? 

So, based upon what little information about this I have, I'm believing you can implement an AAA policy to generate what you need, but you may also have to route through a WTS service to get it as well.   Take a look at this, and you can see why we really cannot fully answer your question:

https://www.ibm.com/docs/en/datapower-gateway/10.6.x?topic=processing-oauth-protocol-support

I'm hoping someone who has actually done this with MasterCard would provide suggestions, but, maybe you are the first!

Hello Joseph, can you please help me? This is an urgent requirement. The link you provided is when DataPower acts as server. in my scenario DataPower acts as client and Mastercard is backend. DataPower should send Oauth Authorization Header to Mastercard. 

It can still be complicated based upon the expected OAuth protocol.

Take a look at these documents on setting up OAuth client profiles. 

https://www.ibm.com/docs/en/datapower-gateway/10.6.0?topic=profiles-profile-only-authorization-server-endpoints

This is likely the way you want to go.

I can try but how do I get the dynamic values for below ? do I need to use dp function? 

oauth_nonce="32lqGrI0f0nQEW85",

oauth_signature="MhfaStcHU0vlIoeaBLuP14(...)qqd99lI56XuCk8RM5dDA%3D%3D",

oauth_body_hash="94cOcstEzvTvyBcNV94PCbo1b5IA35XgPf5dWR4OamU=",    

Have you tried concatenating together the elements of the header value into a string and then just using the 'set-http-request-header' function such that the name is "Authorization" and the value is the value of the string?

Using DataPower MPGW and xslt. Is it achievable ? 

It is difficult to guide you because there are many ways, but what are you working with on your side?  API (API Connect), MPGW, or other service?

Do you prefer doing this by config, xslt or gatewayscript?

How Do I implement datapower to backend API with OAUTH 1.0. Backend ? My application is trying to integrate the mastercard endpoint with OAUTH 1.0. I have the private key and consumer key. How can i generate the AUthorization OAUTH header and send it to backend? 

Authorization: OAuth    oauth_body_hash="94cOcstEzvTvyBcNV94PCbo1b5IA35XgPf5dWR4OamU=",    oauth_nonce="32lqGrI0f0nQEW85",    oauth_signature="MhfaStcHU0vlIoeaBLuP14(...)qqd99lI56XuCk8RM5dDA%3D%3D",    oauth_consumer_key="aXqayIybNdwMnzGIZMAkQYSq(...)139a87746d5b00000000000000",    oauth_signature_method="RSA-SHA256",    oauth_timestamp="1558370962",    oauth_version="1.0"

Mastercard Developers

Requirement is below

application client --> Datapower--> Mastercard. This is proxy service. Application client sending the OAuTH header to Datapower and Datapower is passing it Mastercard but we are getting invalid signature error. Maybe it's because of Datapower proxy. So we decided to create the Oauth authorization header in Datapower and send it to Mastercard. Client will just send the JSON payload, Datapower should append the Oauth authorization header using the private cert and consumer key and send it to backend Mastercard. 

Well, generally speaking, yes.  But, again, you really haven't explained the full end to end.

What I'm gathering is you want to use DataPower to work OAuth to MasterCard on behalf of .... whom?

That is, generally speaking, when OAuth is at play, something or someone (DataPower?) is acting on behalf of another (DataPower's client?) for access to the owner's resource (Mastercard account?). What, then, is DataPower doing for the user?  

Keep in mind:   DataPower as a proxy for the user is not the same as participating in some kind of transaction between the client and two other parties, once of which is MasterCard.

What is the design of the service where DataPower has to negotiate OAuth on behalf of the client?

Hello Joseph, I believe AAA policy is between client and DataPower but not DataPower and Backend. Please correct me if I am wrong. Is it possible in DataPower to integrate with DataPower and backend with Oauth1.0 ? 

So, based upon what little information about this I have, I'm believing you can implement an AAA policy to generate what you need, but you may also have to route through a WTS service to get it as well.   Take a look at this, and you can see why we really cannot fully answer your question:

https://www.ibm.com/docs/en/datapower-gateway/10.6.x?topic=processing-oauth-protocol-support

I'm hoping someone who has actually done this with MasterCard would provide suggestions, but, maybe you are the first!

Hello Joseph, can you please help me? This is an urgent requirement. The link you provided is when DataPower acts as server. in my scenario DataPower acts as client and Mastercard is backend. DataPower should send Oauth Authorization Header to Mastercard. 

It can still be complicated based upon the expected OAuth protocol.

Take a look at these documents on setting up OAuth client profiles. 

https://www.ibm.com/docs/en/datapower-gateway/10.6.0?topic=profiles-profile-only-authorization-server-endpoints

This is likely the way you want to go.

I can try but how do I get the dynamic values for below ? do I need to use dp function? 

oauth_nonce="32lqGrI0f0nQEW85",

oauth_signature="MhfaStcHU0vlIoeaBLuP14(...)qqd99lI56XuCk8RM5dDA%3D%3D",

oauth_body_hash="94cOcstEzvTvyBcNV94PCbo1b5IA35XgPf5dWR4OamU=",    

Have you tried concatenating together the elements of the header value into a string and then just using the 'set-http-request-header' function such that the name is "Authorization" and the value is the value of the string?

Using DataPower MPGW and xslt. Is it achievable ? 

It is difficult to guide you because there are many ways, but what are you working with on your side?  API (API Connect), MPGW, or other service?

Do you prefer doing this by config, xslt or gatewayscript?

How Do I implement datapower to backend API with OAUTH 1.0. Backend ? My application is trying to integrate the mastercard endpoint with OAUTH 1.0. I have the private key and consumer key. How can i generate the AUthorization OAUTH header and send it to backend? 

Authorization: OAuth    oauth_body_hash="94cOcstEzvTvyBcNV94PCbo1b5IA35XgPf5dWR4OamU=",    oauth_nonce="32lqGrI0f0nQEW85",    oauth_signature="MhfaStcHU0vlIoeaBLuP14(...)qqd99lI56XuCk8RM5dDA%3D%3D",    oauth_consumer_key="aXqayIybNdwMnzGIZMAkQYSq(...)139a87746d5b00000000000000",    oauth_signature_method="RSA-SHA256",    oauth_timestamp="1558370962",    oauth_version="1.0"

Mastercard Developers

So, before you began this, the client is otherwise sending everything needed, but the OAuth signature is being rejected?

The proxy, in general, should be transparent to MasterCard.  

When you were getting the invalid signature error, was your MPGW policy doing any processing of the message itself?

Requirement is below

application client --> Datapower--> Mastercard. This is proxy service. Application client sending the OAuTH header to Datapower and Datapower is passing it Mastercard but we are getting invalid signature error. Maybe it's because of Datapower proxy. So we decided to create the Oauth authorization header in Datapower and send it to Mastercard. Client will just send the JSON payload, Datapower should append the Oauth authorization header using the private cert and consumer key and send it to backend Mastercard. 

Well, generally speaking, yes.  But, again, you really haven't explained the full end to end.

What I'm gathering is you want to use DataPower to work OAuth to MasterCard on behalf of .... whom?

That is, generally speaking, when OAuth is at play, something or someone (DataPower?) is acting on behalf of another (DataPower's client?) for access to the owner's resource (Mastercard account?). What, then, is DataPower doing for the user?  

Keep in mind:   DataPower as a proxy for the user is not the same as participating in some kind of transaction between the client and two other parties, once of which is MasterCard.

What is the design of the service where DataPower has to negotiate OAuth on behalf of the client?

Hello Joseph, I believe AAA policy is between client and DataPower but not DataPower and Backend. Please correct me if I am wrong. Is it possible in DataPower to integrate with DataPower and backend with Oauth1.0 ? 

So, based upon what little information about this I have, I'm believing you can implement an AAA policy to generate what you need, but you may also have to route through a WTS service to get it as well.   Take a look at this, and you can see why we really cannot fully answer your question:

https://www.ibm.com/docs/en/datapower-gateway/10.6.x?topic=processing-oauth-protocol-support

I'm hoping someone who has actually done this with MasterCard would provide suggestions, but, maybe you are the first!

Hello Joseph, can you please help me? This is an urgent requirement. The link you provided is when DataPower acts as server. in my scenario DataPower acts as client and Mastercard is backend. DataPower should send Oauth Authorization Header to Mastercard. 

It can still be complicated based upon the expected OAuth protocol.

Take a look at these documents on setting up OAuth client profiles. 

https://www.ibm.com/docs/en/datapower-gateway/10.6.0?topic=profiles-profile-only-authorization-server-endpoints

This is likely the way you want to go.

I can try but how do I get the dynamic values for below ? do I need to use dp function? 

oauth_nonce="32lqGrI0f0nQEW85",

oauth_signature="MhfaStcHU0vlIoeaBLuP14(...)qqd99lI56XuCk8RM5dDA%3D%3D",

oauth_body_hash="94cOcstEzvTvyBcNV94PCbo1b5IA35XgPf5dWR4OamU=",    

Have you tried concatenating together the elements of the header value into a string and then just using the 'set-http-request-header' function such that the name is "Authorization" and the value is the value of the string?

Using DataPower MPGW and xslt. Is it achievable ? 

It is difficult to guide you because there are many ways, but what are you working with on your side?  API (API Connect), MPGW, or other service?

Do you prefer doing this by config, xslt or gatewayscript?

How Do I implement datapower to backend API with OAUTH 1.0. Backend ? My application is trying to integrate the mastercard endpoint with OAUTH 1.0. I have the private key and consumer key. How can i generate the AUthorization OAUTH header and send it to backend? 

Authorization: OAuth    oauth_body_hash="94cOcstEzvTvyBcNV94PCbo1b5IA35XgPf5dWR4OamU=",    oauth_nonce="32lqGrI0f0nQEW85",    oauth_signature="MhfaStcHU0vlIoeaBLuP14(...)qqd99lI56XuCk8RM5dDA%3D%3D",    oauth_consumer_key="aXqayIybNdwMnzGIZMAkQYSq(...)139a87746d5b00000000000000",    oauth_signature_method="RSA-SHA256",    oauth_timestamp="1558370962",    oauth_version="1.0"

Mastercard Developers

MPGW is a pass through service. Client is sending everything but Mastercard is rejecting it with invalid signature. But client initiate the call directly to Mastercard it works fine but via DP it is failing. So we decided let DP create the Oauth signature and send it to Mastercard.

So, before you began this, the client is otherwise sending everything needed, but the OAuth signature is being rejected?

The proxy, in general, should be transparent to MasterCard.  

When you were getting the invalid signature error, was your MPGW policy doing any processing of the message itself?

Requirement is below

application client --> Datapower--> Mastercard. This is proxy service. Application client sending the OAuTH header to Datapower and Datapower is passing it Mastercard but we are getting invalid signature error. Maybe it's because of Datapower proxy. So we decided to create the Oauth authorization header in Datapower and send it to Mastercard. Client will just send the JSON payload, Datapower should append the Oauth authorization header using the private cert and consumer key and send it to backend Mastercard. 

Well, generally speaking, yes.  But, again, you really haven't explained the full end to end.

What I'm gathering is you want to use DataPower to work OAuth to MasterCard on behalf of .... whom?

That is, generally speaking, when OAuth is at play, something or someone (DataPower?) is acting on behalf of another (DataPower's client?) for access to the owner's resource (Mastercard account?). What, then, is DataPower doing for the user?  

Keep in mind:   DataPower as a proxy for the user is not the same as participating in some kind of transaction between the client and two other parties, once of which is MasterCard.

What is the design of the service where DataPower has to negotiate OAuth on behalf of the client?

Hello Joseph, I believe AAA policy is between client and DataPower but not DataPower and Backend. Please correct me if I am wrong. Is it possible in DataPower to integrate with DataPower and backend with Oauth1.0 ? 

So, based upon what little information about this I have, I'm believing you can implement an AAA policy to generate what you need, but you may also have to route through a WTS service to get it as well.   Take a look at this, and you can see why we really cannot fully answer your question:

https://www.ibm.com/docs/en/datapower-gateway/10.6.x?topic=processing-oauth-protocol-support

I'm hoping someone who has actually done this with MasterCard would provide suggestions, but, maybe you are the first!

Hello Joseph, can you please help me? This is an urgent requirement. The link you provided is when DataPower acts as server. in my scenario DataPower acts as client and Mastercard is backend. DataPower should send Oauth Authorization Header to Mastercard. 

It can still be complicated based upon the expected OAuth protocol.

Take a look at these documents on setting up OAuth client profiles. 

https://www.ibm.com/docs/en/datapower-gateway/10.6.0?topic=profiles-profile-only-authorization-server-endpoints

This is likely the way you want to go.

I can try but how do I get the dynamic values for below ? do I need to use dp function? 

oauth_nonce="32lqGrI0f0nQEW85",

oauth_signature="MhfaStcHU0vlIoeaBLuP14(...)qqd99lI56XuCk8RM5dDA%3D%3D",

oauth_body_hash="94cOcstEzvTvyBcNV94PCbo1b5IA35XgPf5dWR4OamU=",    

Have you tried concatenating together the elements of the header value into a string and then just using the 'set-http-request-header' function such that the name is "Authorization" and the value is the value of the string?

Using DataPower MPGW and xslt. Is it achievable ? 

It is difficult to guide you because there are many ways, but what are you working with on your side?  API (API Connect), MPGW, or other service?

Do you prefer doing this by config, xslt or gatewayscript?

How Do I implement datapower to backend API with OAUTH 1.0. Backend ? My application is trying to integrate the mastercard endpoint with OAUTH 1.0. I have the private key and consumer key. How can i generate the AUthorization OAUTH header and send it to backend? 

Authorization: OAuth    oauth_body_hash="94cOcstEzvTvyBcNV94PCbo1b5IA35XgPf5dWR4OamU=",    oauth_nonce="32lqGrI0f0nQEW85",    oauth_signature="MhfaStcHU0vlIoeaBLuP14(...)qqd99lI56XuCk8RM5dDA%3D%3D",    oauth_consumer_key="aXqayIybNdwMnzGIZMAkQYSq(...)139a87746d5b00000000000000",    oauth_signature_method="RSA-SHA256",    oauth_timestamp="1558370962",    oauth_version="1.0"

Mastercard Developers

I would look more closely at what DataPower might have been doing to the data when not involved in trying to negotiate for the client.   You might need to know how the signature is verified by MasterCard to understand why it isn't trusted when flowing through DataPower.

Was the MPG strictly a pass-through?   If so, it shouldn't modify the data at all.  You could consider changing to use a TCP Proxy to see if the signature still fails (though, you won't see that in DataPower, but only on the client side).

After migrating to attempting to have DataPower handle the OAuth exchange, what is the client doing now and how is your system handling that part?

Is MasterCard the authorization server as well as the resource server relative to the client?  Or, is there some other entity the client is logging into so as to pass the access token over to MasterCard to, say, charge something to the client's CC?

MPGW is a pass through service. Client is sending everything but Mastercard is rejecting it with invalid signature. But client initiate the call directly to Mastercard it works fine but via DP it is failing. So we decided let DP create the Oauth signature and send it to Mastercard.

So, before you began this, the client is otherwise sending everything needed, but the OAuth signature is being rejected?

The proxy, in general, should be transparent to MasterCard.  

When you were getting the invalid signature error, was your MPGW policy doing any processing of the message itself?

Requirement is below

application client --> Datapower--> Mastercard. This is proxy service. Application client sending the OAuTH header to Datapower and Datapower is passing it Mastercard but we are getting invalid signature error. Maybe it's because of Datapower proxy. So we decided to create the Oauth authorization header in Datapower and send it to Mastercard. Client will just send the JSON payload, Datapower should append the Oauth authorization header using the private cert and consumer key and send it to backend Mastercard. 

Well, generally speaking, yes.  But, again, you really haven't explained the full end to end.

What I'm gathering is you want to use DataPower to work OAuth to MasterCard on behalf of .... whom?

That is, generally speaking, when OAuth is at play, something or someone (DataPower?) is acting on behalf of another (DataPower's client?) for access to the owner's resource (Mastercard account?). What, then, is DataPower doing for the user?  

Keep in mind:   DataPower as a proxy for the user is not the same as participating in some kind of transaction between the client and two other parties, once of which is MasterCard.

What is the design of the service where DataPower has to negotiate OAuth on behalf of the client?

Hello Joseph, I believe AAA policy is between client and DataPower but not DataPower and Backend. Please correct me if I am wrong. Is it possible in DataPower to integrate with DataPower and backend with Oauth1.0 ? 

So, based upon what little information about this I have, I'm believing you can implement an AAA policy to generate what you need, but you may also have to route through a WTS service to get it as well.   Take a look at this, and you can see why we really cannot fully answer your question:

https://www.ibm.com/docs/en/datapower-gateway/10.6.x?topic=processing-oauth-protocol-support

I'm hoping someone who has actually done this with MasterCard would provide suggestions, but, maybe you are the first!

Hello Joseph, can you please help me? This is an urgent requirement. The link you provided is when DataPower acts as server. in my scenario DataPower acts as client and Mastercard is backend. DataPower should send Oauth Authorization Header to Mastercard. 

It can still be complicated based upon the expected OAuth protocol.

Take a look at these documents on setting up OAuth client profiles. 

https://www.ibm.com/docs/en/datapower-gateway/10.6.0?topic=profiles-profile-only-authorization-server-endpoints

This is likely the way you want to go.

I can try but how do I get the dynamic values for below ? do I need to use dp function? 

oauth_nonce="32lqGrI0f0nQEW85",

oauth_signature="MhfaStcHU0vlIoeaBLuP14(...)qqd99lI56XuCk8RM5dDA%3D%3D",

oauth_body_hash="94cOcstEzvTvyBcNV94PCbo1b5IA35XgPf5dWR4OamU=",    

Have you tried concatenating together the elements of the header value into a string and then just using the 'set-http-request-header' function such that the name is "Authorization" and the value is the value of the string?

Using DataPower MPGW and xslt. Is it achievable ? 

It is difficult to guide you because there are many ways, but what are you working with on your side?  API (API Connect), MPGW, or other service?

Do you prefer doing this by config, xslt or gatewayscript?

How Do I implement datapower to backend API with OAUTH 1.0. Backend ? My application is trying to integrate the mastercard endpoint with OAUTH 1.0. I have the private key and consumer key. How can i generate the AUthorization OAUTH header and send it to backend? 

Authorization: OAuth    oauth_body_hash="94cOcstEzvTvyBcNV94PCbo1b5IA35XgPf5dWR4OamU=",    oauth_nonce="32lqGrI0f0nQEW85",    oauth_signature="MhfaStcHU0vlIoeaBLuP14(...)qqd99lI56XuCk8RM5dDA%3D%3D",    oauth_consumer_key="aXqayIybNdwMnzGIZMAkQYSq(...)139a87746d5b00000000000000",    oauth_signature_method="RSA-SHA256",    oauth_timestamp="1558370962",    oauth_version="1.0"

Mastercard Developers

Hello Joseph,

I found a documentation on how to integrate with Mastercard apis using mulesoft? Can we do the similar approach in DataPower. Is it possible to do steps (b)OAuth_Signature and (c) generate signature using XSLT in the below documentation 

https://medium.com/another-integration-blog/how-to-connect-with-mastercard-apis-with-oauth-1-0-for-authentication-via-mulesoft-eb98d464f091

I would look more closely at what DataPower might have been doing to the data when not involved in trying to negotiate for the client.   You might need to know how the signature is verified by MasterCard to understand why it isn't trusted when flowing through DataPower.

Was the MPG strictly a pass-through?   If so, it shouldn't modify the data at all.  You could consider changing to use a TCP Proxy to see if the signature still fails (though, you won't see that in DataPower, but only on the client side).

After migrating to attempting to have DataPower handle the OAuth exchange, what is the client doing now and how is your system handling that part?

Is MasterCard the authorization server as well as the resource server relative to the client?  Or, is there some other entity the client is logging into so as to pass the access token over to MasterCard to, say, charge something to the client's CC?

MPGW is a pass through service. Client is sending everything but Mastercard is rejecting it with invalid signature. But client initiate the call directly to Mastercard it works fine but via DP it is failing. So we decided let DP create the Oauth signature and send it to Mastercard.

So, before you began this, the client is otherwise sending everything needed, but the OAuth signature is being rejected?

The proxy, in general, should be transparent to MasterCard.  

When you were getting the invalid signature error, was your MPGW policy doing any processing of the message itself?

Requirement is below

application client --> Datapower--> Mastercard. This is proxy service. Application client sending the OAuTH header to Datapower and Datapower is passing it Mastercard but we are getting invalid signature error. Maybe it's because of Datapower proxy. So we decided to create the Oauth authorization header in Datapower and send it to Mastercard. Client will just send the JSON payload, Datapower should append the Oauth authorization header using the private cert and consumer key and send it to backend Mastercard. 

Well, generally speaking, yes.  But, again, you really haven't explained the full end to end.

What I'm gathering is you want to use DataPower to work OAuth to MasterCard on behalf of .... whom?

That is, generally speaking, when OAuth is at play, something or someone (DataPower?) is acting on behalf of another (DataPower's client?) for access to the owner's resource (Mastercard account?). What, then, is DataPower doing for the user?  

Keep in mind:   DataPower as a proxy for the user is not the same as participating in some kind of transaction between the client and two other parties, once of which is MasterCard.

What is the design of the service where DataPower has to negotiate OAuth on behalf of the client?

Hello Joseph, I believe AAA policy is between client and DataPower but not DataPower and Backend. Please correct me if I am wrong. Is it possible in DataPower to integrate with DataPower and backend with Oauth1.0 ? 

So, based upon what little information about this I have, I'm believing you can implement an AAA policy to generate what you need, but you may also have to route through a WTS service to get it as well.   Take a look at this, and you can see why we really cannot fully answer your question:

https://www.ibm.com/docs/en/datapower-gateway/10.6.x?topic=processing-oauth-protocol-support

I'm hoping someone who has actually done this with MasterCard would provide suggestions, but, maybe you are the first!

Hello Joseph, can you please help me? This is an urgent requirement. The link you provided is when DataPower acts as server. in my scenario DataPower acts as client and Mastercard is backend. DataPower should send Oauth Authorization Header to Mastercard. 

It can still be complicated based upon the expected OAuth protocol.

Take a look at these documents on setting up OAuth client profiles. 

https://www.ibm.com/docs/en/datapower-gateway/10.6.0?topic=profiles-profile-only-authorization-server-endpoints

This is likely the way you want to go.

I can try but how do I get the dynamic values for below ? do I need to use dp function? 

oauth_nonce="32lqGrI0f0nQEW85",

oauth_signature="MhfaStcHU0vlIoeaBLuP14(...)qqd99lI56XuCk8RM5dDA%3D%3D",

oauth_body_hash="94cOcstEzvTvyBcNV94PCbo1b5IA35XgPf5dWR4OamU=",    

Have you tried concatenating together the elements of the header value into a string and then just using the 'set-http-request-header' function such that the name is "Authorization" and the value is the value of the string?

Using DataPower MPGW and xslt. Is it achievable ? 

It is difficult to guide you because there are many ways, but what are you working with on your side?  API (API Connect), MPGW, or other service?

Do you prefer doing this by config, xslt or gatewayscript?

How Do I implement datapower to backend API with OAUTH 1.0. Backend ? My application is trying to integrate the mastercard endpoint with OAUTH 1.0. I have the private key and consumer key. How can i generate the AUthorization OAUTH header and send it to backend? 

Authorization: OAuth    oauth_body_hash="94cOcstEzvTvyBcNV94PCbo1b5IA35XgPf5dWR4OamU=",    oauth_nonce="32lqGrI0f0nQEW85",    oauth_signature="MhfaStcHU0vlIoeaBLuP14(...)qqd99lI56XuCk8RM5dDA%3D%3D",    oauth_consumer_key="aXqayIybNdwMnzGIZMAkQYSq(...)139a87746d5b00000000000000",    oauth_signature_method="RSA-SHA256",    oauth_timestamp="1558370962",    oauth_version="1.0"

Mastercard Developers

will provide an update soon.

For one of my clients I used the following Javascript code from Github (https://github.com/Mastercard/oauth1-signer-nodejs/blob/main/src/OAuth.js) as a basis and wrote a custom Gatewayscript that imports this custom MC module.

will provide an update soon.

It shows page not found. Can you please provide the gateway script you used? 

For one of my clients I used the following Javascript code from Github (https://github.com/Mastercard/oauth1-signer-nodejs/blob/main/src/OAuth.js) as a basis and wrote a custom Gatewayscript that imports this custom MC module.

will provide an update soon.

how to sign the string using private key in xslt ? 

Let me try gateway script.