1. OAA Runtime API
  2. Tasks
  3. Preferences

Deprecated - Returns user's challenge preferences as available in the OAA.

get

/oaa/runtime/preferences/v1

Deprecated:Please use fetchuserpreferencessecurely API. Returns a list of challenge preferences for user. Error is returned for user not found in the OAA.

Request

Query Parameters
  • GroupId / ApplicationId of the user whose preferences data is required. If this parameter is not present, then a value of "Default" is used.
  • Immutable ID of the user in the external systems. If this is present, then it takes precedence over userId + groupId combination.
  • UserId or loginId of the user whose preferences data is required.

There's no request body for this operation.

Back to Top

Response

Supported Media Types

200 Response

Success
Body ()
Root Schema : UserPreferences
Type: object
Information about the user and user's challenge registration for each type of challenge factor.
Show Source
  • User's altername name that may be used in the user screens.
  • The default locale of the user. If not provided then a default value of "en_US" will be used.
  • User's display name that may be used in the user screens.
  • factorsRegistered
    Array of factor registration data for user.
  • GroupId / ApplicationId of the user whose preferences data is required. If this parameter is not present a value of "Default" is used.
  • Location of the secureImage. Example:/images/secureImage01.jpg. If system is configured to return the image path as a full URL, then following two properties need to be configured. 1.)oaa.preferences.prependBasePath = true (default is false), 2.)oaa.preferences.imageBasePath=. If system property oaa.preferences.prependBasePath = false, then only the location of the secureImage is returned as is. For set(post) only the relative path should be used and for get full URL will be returned if configured as above.
  • User preferred phrase string ex Hello World!
  • Immutable ID of the user in the external systems. If this is present, then it takes precedence over userId + groupId combination.
  • Unique identifier of the user. May be further qualified by groupId.
Nested Schema : factorsRegistered
Type: array
Array of factor registration data for user.
Show Source
  • FactorRegData
    Entry containing a factorName and map of keys and a values. Map of keys and values will contain attributes specific to that factor.
Nested Schema : FactorRegData
Type: object
Entry containing a factorName and map of keys and a values. Map of keys and values will contain attributes specific to that factor.
Show Source
  • factorAttributes
    Collection of attributes for a factor for this user.
  • Key of the factor. This is the name that should map to one of the available factors in the OAA system. This should be one of the enum name in challenge.type.enum. Examples are ChallengeEmail, ChallengeSMS, ChallengeOMATOTP, ChallangeYOTP and ChallengeFIDO2.
  • This is the name that should map to one of the available factors in the OAA system. This should be one of the enum name in challenge.type.enum. For Example if factor is email then factorName should be Email Challenge. Examples are Email Challenge, SMS Challenge, OMA TOTP Challenge, Yubikey OTP Challange and FIDO2 Challenge.
  • Is the factor is preferred factor for the user to challenge.
Nested Schema : factorAttributes
Type: array
Collection of attributes for a factor for this user.
Show Source
Nested Schema : PrefFactorAttribute
Type: object
A map represented as an array of entries.
Show Source
Nested Schema : factorAttributeValue
Type: array
Value of factor specific attribute. Multiple values can be specified in the array.
Show Source
Nested Schema : PrefFactorAttributeValue
Type: object
Attribute value of the factor.
Show Source
  • "Date time string in the format rfc3339 sec 5.6. https://tools.ietf.org/html/rfc3339#section-5.6"
  • Indicates if the factor attribute is enabled or not. By default, it is set as true.
  • Indicates if the value of the attribute is preferred over other similar values in the array.
  • Default Value: true
    Indicates if the given attribute is validated. Some attributes do not require validation hence this field is optional.
  • Default Value: true
    Indicates if the given attribute is verified. Some attributes do not require verification hence this field is optional.
  • Friendly name of the device.
  • Value of the factor attribute.

401 Response

Unauthorized

406 Response

Requested user information not found
Body ()
Root Schema : PrefAPIResponse
Type: object
Show Source
Back to Top

Examples

The following example shows a sample request and response for retrieving a list of registered challenge preferences for the user.

cURL Command to Retrieve a List of Registered Challenge Preferences in JSON Format

curl --location --request GET '<OAAService>/oaa/runtime/preferences/v1?userId=user1&groupId=Default' \
--header 'Authorization: Basic <Base64Encoded(<username>:<password>)>'

Sample Response in JSON Format

{
    "userId": "user1",
    "groupId": "Default",
    "imageReference": "/images/img001.jpg",
    "phraseString": "Hello World!",
    "factorsRegistered": [
     {
        "isPreferred": false,
        "factorName": "Email Challenge",
        "factorKey": "ChallengeEmail",    
        "factorAttributes": [
         {
	    "factorAttributeName": "email",
	    "factorAttributeValue": [
	    {
		"value": "user1@example.com",
		"isPreferred": false,
		"isVerified": true,
		"isValidated": true,
		"name": "my-email",
		"isEnabled": true,
		"createTime": {
		    "parseFailed": false,
		    "rawParam": "2023-05-10T21:07:36.814Z",
		    "dateTime": "2023-05-10T21:07:36.814Z"
                        }
               }
            ]
        }
    ]
}
Back to Top