[Fiware-lab-help] OAuth2 implicit grant in KeyRock IdM

[CHOLLON Geoffroy]

Hello

Sorry to restart this old conversation but we are facing a problem as we try to re-use the Implicit grant flow.

Is this grant type still officially supported in the cloud portal ?.



Because when we trigger an Implicit grant flow with this request to the cloud portal:

-          GET: https://account.lab.fiware.org/oauth2/authorize/?response_type=token&client_id=3792205b5f2d459c970d7aabc78de581&redirect_uri=https%3A%2F%2F195.220.224.42&scope=public&state=0
The cloud portal answer this this redirection:

-          Location:https://195.220.224.42?state=0&code=M6o5hPdfqqHm92Ap8ZlXqM5pkNyhtX
Which doesn’t look like a valid “Implicit answer’ because:

-          1: we should have receive the parameters in a fragment url

-          2: we should have receive an ‘access_code’ and  a ‘token_type’ parameter instead of ‘code’



Thanks
Geoffroy

[@@ OPEN @@]

From: Álvaro Alonso [mailto:aalonsog at dit.upm.es]
Sent: lundi 15 juin 2015 12:58
To: LOPEZ RAMOS Mario
Cc: Federico Michele Facca; fiware-lab-help at lists.fi-ware.org; CHOLLON Geoffroy
Subject: Re: [Fiware-lab-help] OAuth2 implicit grant in KeyRock IdM

Hi,

yes, it is already implemented. Now we support all grant types. I sent a notification to FIWARE Lab users with the communication. If you have an account you should have received it.

BR
--
Álvaro

El 12 Jun 2015, a las 13:53, LOPEZ RAMOS Mario <mario.lopezramos at thalesgroup.com<mailto:mario.lopezramos at thalesgroup.com>> escribió:

Dear Alvaro,

Is there any progress in the implementation of the implicit authentication flow of the IdM?

We are currently using a dirty hack (a proxy server) to circumvent this missing feature, and we would like to know when we can return to normal operation.

Thank you very much for your support.

Best regards,

Mario


De : Álvaro Alonso [mailto:aalonsog at dit.upm.es]
Envoyé : mercredi 13 mai 2015 11:33
À : LOPEZ RAMOS Mario
Cc : Federico Michele Facca; fiware-lab-help at lists.fi-ware.org<mailto:fiware-lab-help at lists.fi-ware.org>; CHOLLON Geoffroy; BESSON Lionel
Objet : Re: [Fiware-lab-help] OAuth2 implicit grant in KeyRock IdM

Hi Mario,

I cannot give you a estimation right now, sorry. We are now focused it stabilisation tasks. And then we start with new features.

BR
--
Álvaro

El 13 May 2015, a las 10:26, LOPEZ RAMOS Mario <mario.lopezramos at thalesgroup.com<mailto:mario.lopezramos at thalesgroup.com>> escribió:

Dear Federico,

Thank you for your quick answer.

@Alvaro, could you please give a rough estimation of when this is expected to be completed?

Thank you very much for your support.

Best regards,

Mario

De : Federico Michele Facca [mailto:federico.facca at create-net.org]
Envoyé : mardi 12 mai 2015 18:36
À : LOPEZ RAMOS Mario; Alvaro Alonso
Cc : fiware-lab-help at lists.fi-ware.org<mailto:fiware-lab-help at lists.fi-ware.org>; CHOLLON Geoffroy; BESSON Lionel
Objet : Re: [Fiware-lab-help] OAuth2 implicit grant in KeyRock IdM

Dear Mario,
UPM is working to introduce the support for the implicit authentication. This was not foreseen as a requirement for the new IDM since it was not advertised as supported. But since a number of users are relaying on it, they are working on solving the issue. They will update you on the status.

Federico

On Tue, May 12, 2015 at 6:25 PM, LOPEZ RAMOS Mario <mario.lopezramos at thalesgroup.com<mailto:mario.lopezramos at thalesgroup.com>> wrote:
Our application (‘FIC2Lab runner’, that helps accelerators and SMEs deploy enablers) is developed in client-side JavaScript. We were using the method recommended by RFC6749 for client-side JavaScript applications (Implicit Grant) [1] with the previous KeyRock FIWARE Lab instance and it was working until last week. Now, without any notice, this method is apparently not working any more.

According to the announcement e-mail sent to FIWARE Lab users on May 7th, the new KeyRock currently support two grant types (Authorization Code Grant and Resource Owner Password Credentials Grant). Does this mean that the Implicit Grant was supported but it is no longer the case?


Technical details:

We are using this AngularJS library:
https://github.com/andreareginato/oauth-ng

Our application sends this POST:
https://account.lab.fiware.org/oauth2/authorize/?scope=public&state=&redirect_uri=http%3A%2F%2Frunner.developer.mediafi.org%2F&response_type=code&client_id=1d75df2ec0c1478db98a3c8db3169d63

It gives an “Error: An error occurred when trying to obtain the authorization code.”

You can test yourself at http://runner.developer.mediafi.org<http://runner.developer.mediafi.org/>

Thank you for your help.

[1] https://tools.ietf.org/html/rfc6749#section-1.3.2


_______________________________________________
Fiware-lab-help mailing list
Fiware-lab-help at lists.fi-ware.org<mailto:Fiware-lab-help at lists.fi-ware.org>
https://lists.fi-ware.org/listinfo/fiware-lab-help



--
--
Future Internet is closer than you think!
http://www.fiware.org<http://www.fiware.org/>

Official Mirantis partner for OpenStack Training
https://www.create-net.org/community/openstack-training

--
Dr. Federico M. Facca

CREATE-NET
Via alla Cascata 56/D
38123 Povo Trento (Italy)

P  +39 0461 312471
M +39 334 6049758
E  federico.facca at create-net.org<mailto:federico.facca at create-net.org>
T @chicco785
W  www.create-net.org<http://www.create-net.org/>

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.fiware.org/private/fiware-lab-help/attachments/20150703/891c9a9c/attachment.html>