How to Secure Injector Service with Oauth2
Primary authentication mechanism in the cloud is OAuth2 using IDCS authenticator. RIB uses IDCS OAuth2 for authentication of ReST calls both inbound and outbound (publisher/injector restful services). Hence Injector service exposed by external service should be secured with OAuth2. This chapters covers the key points that should be taken into consideration while protecting the resources exposed by external application.
Prerequisites
-
IDCS should be same as RICS.
-
Use Client Credentials grant type with scope to provide access to resource.
-
Following is the screen shot of a sample IDCS app with scope added
![IDCS app with scope IDCS app with scope](img/secure_injector.png)
Note:
Follow IDCS documentation for detailed instruction on setup.