IBM Verify

IBM Verify

Join this online user group to communicate across Security product users and IBM experts by sharing advice and best practices with peers and staying up to date regarding product enhancements.

 View Only
Expand all | Collapse all

Accessing Protected Resource with JWT in request header from JAVA client

  • 1.  Accessing Protected Resource with JWT in request header from JAVA client

    Posted Wed January 15, 2020 01:52 PM
    Hello,

    I have followed labs and cookbooks like Federation, OAuth, API-protactions by Jon. I am trying to work on use case where OAuth Clients(Java Based System Application) gets id_token from OP/IDP in Hybrid OAuth or odice flow and makes a cross domain request to another endpoint which is a reverse Proxy behind another ISAM Runtime with runas/bearer authorization JWT on header to get access to protectes resources.




    ------------------------------
    Piyush Agrawal
    ISAM Security Architect
    Norway
    ------------------------------


  • 2.  RE: Accessing Protected Resource with JWT in request header from JAVA client

    Posted Thu January 16, 2020 12:06 PM
    I had possibility to fix above issue by using access_token and shareing ISAM Runtime on crossdomain /mga junction.

    ------------------------------
    Piyush Agrawal
    ------------------------------