Generating an ORDS Access Token

You will need an IDCS Authorization Server endpoint URL and ORDS service credentials to perform the steps described below.

One uses an IDCS Authorization Server to generate an ORDS access token. Two access token generation techniques will be described, curl and POSTMAN. One is likely to use both techniques during the development process.

Generating an Access Token Using cURL

The cURL command for generating an access token has five components:

The IDCS Authorization Server endpoint URL
A content type
An authorization
A grant type
A scope

Only the IDCS Authorization Server endpoint URL and authorization are customer-specific. Content type, grant type, and scope are the same for all customers.

The endpoint URL has the following form:

https://<idcs authorization server host>/oauth2/v1/token

The authorization uses Basic Auth. You will need to base64 encode your Basic Auth credentials using the following format:

clientId:clientSecret

Replace Client ID and Client Secret with credentials obtained using the method described in the 4.3.2 Obtaining ORDS Service Credentials section above. Then use a base64 encoding tool to encode the string.

The cURL command to generate a token is as follows:

curl --location --request \
POST 'https://<idcs authorization server host>/oauth2/v1/token' \
--header 'Content-Type: application/x-www-form-urlencoded' \
--header 'Authorization: Basic <base64 clientId:clientSecret>’ \
--data-urlencode 'grant_type=client_credentials' \
--data-urlencode 'scope=urn:opc:idm:__myscopes__'

Generating an Access Token Using POSTMAN

Generating is access token in POSTMAN is typically an integral part of calling other services. In this section, we will illustrate the process of generating a token directly and generating it as part of another service invocation. Use the following steps to generate a token directly:

Open POSTMAN and create a new request by clicking on the New button in the top left corner of the screen.
Select HTTP.
In the new request tab, select the POST method from the drop-down menu.
Enter the IDCS Authorization Server endpoint URL in the "Enter request URL" field.
Click the Authorization tab to configure authorization.
In the Type drop-down menu, select Basic Auth.
Enter your username (client id) and password (client secret) in the fields provided.
Next click the Body tab to add the grant type and scope parameters.
In the menu, select x-www-form-urlencoded.

Next enter two key-value pairs:

Key	Value
grant_type	client_credentials
scope	urn:opc:idm:__myscopes__

Once you have configured your request, click on the "Send" button to execute it.
The response from the service will be displayed in the "Response" section below the request configuration. You can view the response headers and body, as well as any errors or status codes. The response is JSON formatted and should have the following form:
```
{
    "access_token": "<token>",
    "token_type": "Bearer",
    "expires_in": 3600
}
```
You can also save the request for future use by clicking on the "Save" button in the top right corner of the screen and giving it a name.

To use OAuth2 in Postman to invoke a ORDS service, you can follow these steps.

Open POSTMAN and create a new request.
Select the Authorization tab from the top of the request builder.
Select the OAuth 2.0 type from the drop-down menu.
Scroll down to Configure New Token.
Choose a name for the token configuration.
Select client credentials as the grant type.
Enter your IDCS Authoization server endpoint URL, client id, client secret, and scope as you did above.
Set client authentication to Send as Basic Auth Header.
Scroll down to get new access token.
POSTMAN will then display the token details, such as the access token, refresh token, and token expiration time.
Finally, click the Use Token to apply the token to your service.

Before proceeding verify your understanding and validate your ORDS service credentials:

Unless you do not expect to use cURL, verify your that you can generate a token using cURL.
Unless you do not plan to use POSTMAN, then verify your understanding by generating a token using POSTMAN.
More than likely, you do not have an ORDS service with which to test authentication at this point. If you do and you expect to use POSTMAN, then verify your understanding by invoking an ORDS service.