|
UAA: How to set client_credentials token grant type to not expire
Hi, I have some trusted clients set up to use client_credentials token grant. I'll like to set their tokens not to expire. How do I achieve this?
|
Hi, I have some trusted clients set up to use client_credentials token grant. I'll like to set their tokens not to expire. How do I achieve this?
|
By
Paul Bakare
· #887
·
|
|
UAA: How to set client_credentials token grant type to not expire
Thanks Filip. However, everytime I set that (for example, I set it to 2542838400), I get this: "The request sent by the client was syntactically incorrect." That's December 31st 2050 when decoded. Is
|
Thanks Filip. However, everytime I set that (for example, I set it to 2542838400), I get this: "The request sent by the client was syntactically incorrect." That's December 31st 2050 when decoded. Is
|
By
Paul Bakare
· #915
·
|
|
Invalid password change request
Hi, I have a valid token with the right scopes and authorities as seen below when decoded: {"jti":"06ef4e8d-2dc9-4458-9aca-ef89384861c6","sub":"85d99b6e-eaeb-4171-98ba-3e6843f577d7","scope":["password
|
Hi, I have a valid token with the right scopes and authorities as seen below when decoded: {"jti":"06ef4e8d-2dc9-4458-9aca-ef89384861c6","sub":"85d99b6e-eaeb-4171-98ba-3e6843f577d7","scope":["password
|
By
Paul Bakare
· #957
·
|
|
Invalid password change request
I thought so too. But when I add that I get this: <html><head><title>Apache Tomcat/7.0.55 - Error report</title><style><!--H1 {font-family:Tahoma,Arial,sans-serif;color:white;background-color:#525D76;
|
I thought so too. But when I add that I get this: <html><head><title>Apache Tomcat/7.0.55 - Error report</title><style><!--H1 {font-family:Tahoma,Arial,sans-serif;color:white;background-color:#525D76;
|
By
Paul Bakare
· #959
·
|
|
Invalid password change request
curl -v -H "Authorization: Bearer eyJhbGciOiJIUzI1NiJ9.eyJqdGkiOiIzMzQ5ZmE1Yy01MDU0LTRiOWYtYmY5My0zZDYyMDFhN2YzMjEiLCJzdWIiOiJ1c2VyYWNjb3VudCIsImF1dGhvcml0aWVzIjpbInNjaW0ucmVhZCIsInNjaW0udXNlcmlkcyIsI
|
curl -v -H "Authorization: Bearer eyJhbGciOiJIUzI1NiJ9.eyJqdGkiOiIzMzQ5ZmE1Yy01MDU0LTRiOWYtYmY5My0zZDYyMDFhN2YzMjEiLCJzdWIiOiJ1c2VyYWNjb3VudCIsImF1dGhvcml0aWVzIjpbInNjaW0ucmVhZCIsInNjaW0udXNlcmlkcyIsI
|
By
Paul Bakare
· #962
·
|
|
Invalid password change request
I installed it a while ago and I got some hairy errors. So I just dumped it. I'll try it again. Thanks for mentioning. wrote:
|
I installed it a while ago and I got some hairy errors. So I just dumped it. I'll try it again. Thanks for mentioning. wrote:
|
By
Paul Bakare
· #963
·
|
|
Invalid password change request
The uaac is much useful for ops use case. However, my use case leans more towards the REST API. Do you an idea why I might be getting those errors. As you can see, the token has got the right scope.
|
The uaac is much useful for ops use case. However, my use case leans more towards the REST API. Do you an idea why I might be getting those errors. As you can see, the token has got the right scope.
|
By
Paul Bakare
· #964
·
|
|
UAA: How to set client_credentials token grant type to not expire
Filip, Even when I set the value to 315569260 (this value seems to be lesser than today though), when I decode the issued token, I get something like this `"exp":1438209609`. Is token validity and exp
|
Filip, Even when I set the value to 315569260 (this value seems to be lesser than today though), when I decode the issued token, I get something like this `"exp":1438209609`. Is token validity and exp
|
By
Paul Bakare
· #965
·
|
|
UAA: How to set client_credentials token grant type to not expire
Thanks again Filip. However, here's what I mean, If I set the access_token_validity to 315569260, I'm expecting the token when decoded to read exp: 315569260. If this is not, then is it possible to se
|
Thanks again Filip. However, here's what I mean, If I set the access_token_validity to 315569260, I'm expecting the token when decoded to read exp: 315569260. If this is not, then is it possible to se
|
By
Paul Bakare
· #971
·
|
|
UAA: How to set client_credentials token grant type to not expire
Good. But my apologies. Assume: creation time = 1438184877 access token validity (set by me) = 315360000 exp is expected to be 1753544877 when decoded. Unfortunately, this test fails, as exp reads 143
|
Good. But my apologies. Assume: creation time = 1438184877 access token validity (set by me) = 315360000 exp is expected to be 1753544877 when decoded. Unfortunately, this test fails, as exp reads 143
|
By
Paul Bakare
· #975
·
|
|
UAA: How to set client_credentials token grant type to not expire
Filip, Here's my client config: useraccount scope: clients.read oauth.approvals openid password.write tokens.read tokens.write uaa.admin resource_ids: none authorized_grant_types: authorization_code c
|
Filip, Here's my client config: useraccount scope: clients.read oauth.approvals openid password.write tokens.read tokens.write uaa.admin resource_ids: none authorized_grant_types: authorization_code c
|
By
Paul Bakare
· #1026
·
|
|
UAA: How to set client_credentials token grant type to not expire
Thank you. Needed to update to make this work. uaac client update useraccount --access_token_validity 315360000
|
Thank you. Needed to update to make this work. uaac client update useraccount --access_token_validity 315360000
|
By
Paul Bakare
· #1243
·
|
|
CF UAA Refresh Token
This is an issue with authorization. You have to use a user with the correct scope. Specifically, use a client with a scope/authority of 'uaa.admin' The easiest way is to use the 'app' client to gener
|
This is an issue with authorization. You have to use a user with the correct scope. Specifically, use a client with a scope/authority of 'uaa.admin' The easiest way is to use the 'app' client to gener
|
By
Paul Bakare
· #1359
·
|
|
Request timeout in CloudFoundry
Hi, I'm experiencing this same issue. I have a NodeJS app, using the nodejs buildpack. A request taking approximately 80 secs long gets timed out (502 response). We're using the default CF ELBs (gorou
|
Hi, I'm experiencing this same issue. I have a NodeJS app, using the nodejs buildpack. A request taking approximately 80 secs long gets timed out (502 response). We're using the default CF ELBs (gorou
|
By
Paul Bakare
· #1482
·
|
|
UAA restart invalidates a valid token
Hi, What could cause a valid token to become invalid on UAA restart? I've noticed this overtime, that a token (of client_credentials grant type) which has a validity of 315360000 and has been used for
|
Hi, What could cause a valid token to become invalid on UAA restart? I've noticed this overtime, that a token (of client_credentials grant type) which has a validity of 315360000 and has been used for
|
By
Paul Bakare
· #1587
·
|
|
UAA restart invalidates a valid token
Awesome. option 2 is definitely the cause of the problem. Thank you very much.
|
Awesome. option 2 is definitely the cause of the problem. Thank you very much.
|
By
Paul Bakare
· #1590
·
|
|
Would UAA user encrypted password always begin with $
Hi, I've noticed that UAA encrypted password pattern begins with $ such as $2a$10$gJaOC9WDsS6y6np8yYF.W.t9ShyUgSO1CP1JvW1F.aBicSxfYTKYe Would this pattern remain constant?
|
Hi, I've noticed that UAA encrypted password pattern begins with $ such as $2a$10$gJaOC9WDsS6y6np8yYF.W.t9ShyUgSO1CP1JvW1F.aBicSxfYTKYe Would this pattern remain constant?
|
By
Paul Bakare
· #1711
·
|
|
Would UAA user encrypted password always begin with $
Thank you.
By
Paul Bakare
· #1715
·
|
|
Packaging CF app as bosh-release
Hi, Does it make any sense to package a CF app as boshrelease?
|
Hi, Does it make any sense to package a CF app as boshrelease?
|
By
Paul Bakare
· #1757
·
|
|
Packaging CF app as bosh-release
I'm working on an experimental analytics project that leverages logsearch + Apache Spark. So instead of having the Spark jobs as apps, I'm thinking of building a bosh release job for it. Can possibly
|
I'm working on an experimental analytics project that leverages logsearch + Apache Spark. So instead of having the Spark jobs as apps, I'm thinking of building a bosh release job for it. Can possibly
|
By
Paul Bakare
· #1780
·
|
