Authentication

Oracle Content and Experience Cloud uses a certificate authority (CA) certificate, issued by Verisign, to enable clients to connect securely to the server.

Note:

Ensure that you have the appropriate log-in credentials for creating, managing, and deleting Oracle Content and Experience Cloud instances, as described in Quick Start.

You access the Collaboration REST resources over HTTPS and must provide the following information for authentication:
  • An SSL certificate authority (CA) certificate file or bundle to authenticate against the Verisign CA certificate.

  • User name and password for your Oracle Content and Experience Cloud account.

  • Custom header.

For example, to authenticate using cURL:

  • Set the cURL environment variable, CURL_CA_BUNDLE, to the location of your local CA certificate bundle. For information about CA certificate verification using cURL, see http://curl.haxx.se/docs/sslcerts.html.

  • Pass the user name and password for your Oracle Content and Experience Cloud account, using the -u cURL option.

  • Pass the custom request header, using the -H cURL option.

A cURL command for authentication of an Oracle Content and Experience Cloud client follows:
curl -L -i -c mycookies.jar -b mycookies.jar -H 'Authorization:encoded username:password' -H "Content-Type: application/json" -H "Accept: application/json" -X GET https://oracleContentExperienceInstance-identityName.network.dataCenter.oraclecloud.com/osn/social/api

In the command, 'encoded username:password' is the base64 encode for username:password. If above request has succeeded, you will have the valid user session stored in the cookies.

Now you do a POST with an empty payload to the Connections REST endpoint to obtain the ApiRandomID.

curl -L -i -c mycookies.jar -b mycookies.jar -H "Content-Type: application/json" -H "Accept: application/json" -X POST https://oracleContentExperienceInstance-identityName.network.dataCenter.oraclecloud.com/osn/social/api/connections -D ""

Then use the value in the request header for subsequence requests.