I have Oauth working with Consumer Key for my micro gateway using a developer app credentials. I I created a company applicaiton with access to my Micro Gateway proxy but getting a 403 forbidden. Wondering if anyone else has tried using a company app consumer key with success?
Company app details:
{ “accessType” : “”, “appFamily” : “default”, “appId” : “eaae9a22-3729-45bc-9521-ed2074f4f9bd”, “attributes” : [ { “name” : “troux-app-name”, “value” : “SteveCompanyapp1” }, { “name” : “troux-app-id”, “value” : “07CCB5FB-9993-4A75-93BD-04F2880E0DC7” }, { “name” : “support_email”, “value” : “steven.boyatsis@libertymutual.com” } ], “callbackUrl” : “”, “companyName” : “stevedevcompany”, “createdAt” : 1508162909031, “createdBy” : “steven.boyatsis@libertymutual.com”, “credentials” : [ { “apiProducts” : [ { “apiproduct” : “SteveMicroTEST”, “status” : “approved” } ], “attributes” : , “consumerKey” : “WJZ4syOId99QI1G6RpYlYu6MEfsWt7dL”, “consumerSecret” : “redacted”, “expiresAt” : -1, “issuedAt” : 1508163397346, “scopes” : , “status” : “approved” }, { “apiProducts” : [ { “apiproduct” : “SteveMicroTEST”, “status” : “approved” } ], “attributes” : , “consumerKey” : “rlP7SLKfjGlf3fDBFbOybxH7e8qLl4or”, “consumerSecret” : “redacted”, “expiresAt” : -1, “issuedAt” : 1508162909044, “scopes” : , “status” : “approved” } ], “lastModifiedAt” : 1508163397336, “lastModifiedBy” : “steven.boyatsis@libertymutual.com”, “name” : “SteveCompanyapp1”, “scopes” : , “status” : “approved” }
With company app key
curl -i http://localhost:8000/edgemicro_steve_proxy/ -H “x-api-key: WJZ4syOId99QI1G6RpYlYu6MEfsWt7dL” HTTP/1.1 403 Forbidden content-type: application/json Date: Mon, 16 Oct 2017 15:21:07 GMT Connection: keep-alive Content-Length: 69 Proxy-Connection: keep-alive {“error”:“access_denied”,“error_description”:“Internal Server Error”}
With developer app key
curl -i http://localhost:8000/edgemicro_steve_proxy/ -H “x-api-key: Ronbx6MFg6v7wHCDNvrBrYuZI49Xlw7U” HTTP/1.1 200 OK access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept access-control-allow-origin: * content-type: application/json; charset=utf-8 date: Mon, 16 Oct 2017 15:22:47 GMT etag: W/“1d-CimmYnaaaxXpCA1NOWDWGTqTk2g” server: Apigee Router x-powered-by: Express x-vcap-request-id: 697577b4-f961-41d4-5648-c1dec959535b, 86a09d94-1f21-4dce-6889-b2213a63a636 x-response-time: 1015 Connection: keep-alive Transfer-Encoding: chunked Proxy-Connection: keep-alive {“hello”:“hello from cf app”}
Debug micro gateway server logs:
gateway:main selected proxy https://steveapi.sandbox.paas.lmig.com with base path /edgemicro_steve_proxy for request path /edgemicro_steve_proxy/ +2m gateway:main sourceRequest +2ms a18fa670-b285-11e7-b284-9168a6e09c7a GET /edgemicro_steve_proxy/ plugin:oauth api key cache miss WJZ4syOId99QI1G6RpYlYu6MEfsWt7dL +2m plugin:oauth verify apikey access_denied +318ms plugin:oauth auth failure 403 access_denied Internal Server Error { host: ‘localhost:8000’, ‘user-agent’: ‘curl/7.54.0’, accept: ‘/’, ‘proxy-connection’: ‘Keep-Alive’, ‘x-api-key’: ‘WJZ4syOId99QI1G6RpYlYu6MEfsWt7dL’, connection: ‘keep-alive’, client_received_start_timestamp: 1508167266904 } GET /edgemicro_steve_proxy/ +0ms gateway:errors access_denied +324ms analytics flushing 1 records. 0 records remaining. +211ms gateway:main selected proxy https://steveapi.sandbox.paas.lmig.com with base path /edgemicro_steve_proxy for request path /edgemicro_steve_proxy/ +3m gateway:main sourceRequest +3ms d2c46410-b285-11e7-981a-8b2dbff8effa GET /edgemicro_steve_proxy/ plugin:oauth api key cache miss Ronbx6MFg6v7wHCDNvrBrYuZI49Xlw7U +3m plugin:oauth product only: false +200ms plugin:oauth matches proxy rules: /edgemicro_steve_proxy/ +1ms plugin:oauth api key cache store Ronbx6MFg6v7wHCDNvrBrYuZI49Xlw7U +0ms gateway:main targetRequest +207ms d2c46410-b285-11e7-981a-8b2dbff8effa GET steveapi.sandbox.paas.lmig.com NaN / gateway:main plugin healthcheck does not provide handler function for end_request +3ms gateway:main plugin oauth does not provide handler function for end_request +1ms gateway:main targetResponse +801ms d2c46410-b285-11e7-981a-8b2dbff8effa 200 gateway:main plugin oauth does not provide handler function for response +0ms gateway:main plugin healthcheck does not provide handler function for response +0ms gateway:main [ null, null, null ] +0ms gateway:main req data +4ms 29 gateway:main plugin oauth does not provide handler function for data_response +0ms gateway:main plugin healthcheck does not provide handler function for data_response +0ms gateway:main plugin analytics does not provide handler function for data_response +0ms gateway:main plugin oauth does not provide handler function for end_response +1ms gateway:main plugin healthcheck does not provide handler function for end_response +0ms analytics flushing 1 records. 0 records remaining. +1s
Thanks.