API Connect

 View Only
  • 1.  Emailing Client_id and Client_Secret to consumer organization

    Posted Thu May 25, 2023 10:53 AM
    Hi Team...
     
    We wanted to achieve the below in API Developer portal and API Manager UI. Please let me know how is it achievable.
     
    1. The Client_Id and Client_Secret which is generated in developer portal during the subscription process should be emailed to the configured consumer organization email.
    2. The Client_Id and Client_Secret generated in API Manager UI generated during the subscription process should not be visible and rather, sent as an email to configured consumer organization email


    ------------------------------
    Ashok Beshra
    ------------------------------


  • 2.  RE: Emailing Client_id and Client_Secret to consumer organization

    Posted Fri May 26, 2023 03:26 AM

    You could write a custom module to do that in the portal if you wanted - though I would question the security of that. Client credentials are basically passwords - sending them via insecure email doesn't seem the greatest plan.
    Your custom module would need to hook into all of the credential forms - app create, credential create, credential reset, etc... as the client secret is only returned at that point and can never be retrieved again, only reset.
    That customisation might be something you need to hire Services to help with.

    In API Manager thats not possible at all - the API Manager UI is not configurable, it works how it works and if you want any changes to that behaviour you would need to raise an RFE.

    Cheers,

    Chris



    ------------------------------
    Chris Dudley
    ------------------------------



  • 3.  RE: Emailing Client_id and Client_Secret to consumer organization

    Posted Fri May 26, 2023 07:55 AM
    Edited by Nick Cawood Fri May 26, 2023 07:55 AM

    Hi,

    This is something you would have to do programmatically using the Provider API.

    1. Create the App - client-id / secret are returned upon creation: https://apic-api.apiconnect.ibmcloud.com/v10/#/IBMAPIConnectPlatformProviderAPI_200/operation/%2Fconsumer-orgs%2F{org}%2F{catalog}%2F{consumer-org}%2Fapps/post

    2. Get the email addresses of the Consumer Org members: https://apic-api.apiconnect.ibmcloud.com/v10/#/IBMAPIConnectPlatformProviderAPI_200/operation/%2Fconsumer-orgs%2F{org}%2F{catalog}%2F{consumer-org}%2Fmembers/get

    3. Code around these calls to create your email to inform the Consumers (not within APIC).

    In general here is some guidance about getting started with the Provider API: https://community.ibm.com/community/user/integration/blogs/nick-cawood/2023/02/22/some-advice-about-using-the-api-connect-v10-apic-t?CommunityKey=2106cca0-a9f9-45c6-9b28-01a28f4ce947

    Or as Chris has said, you can raise an Enhancement Request.



    ------------------------------
    Nick Cawood
    API Connect Consultant
    IBM Hybrid Cloud Integration Expert Labs
    IBM UK Ltd

    https://www.linkedin.com/in/nickcawood/
    ------------------------------