Secure Oracle Integration Cloud REST endpoint with OAuth

แชร์
ฝัง

ความคิดเห็น • 87

  • @akhtarlatif7600
    @akhtarlatif7600 ปีที่แล้ว

    This is lovely video. Understood OAuth in minutes. Thank you Ankur !

    • @TechSupper
      @TechSupper  ปีที่แล้ว

      Glad you liked it
      You can buy my OIC Gen-3 course that will help you to fasttrack your OIC learning journey:
      www.udemy.com/course/deep-dive-into-oracle-integration/?referralCode=26194341D09D3B93921F

  • @ShirishAavancha
    @ShirishAavancha 10 หลายเดือนก่อน

    Excellent Video, very simple to understand and follow. Thank you

    • @TechSupper
      @TechSupper  10 หลายเดือนก่อน

      Glad it was helpful!

  • @RaHuLSaHa-cu5zm
    @RaHuLSaHa-cu5zm 3 ปีที่แล้ว +1

    Hi Ankur ,
    This is an excellent video ..thanks for covering this complex topic . I have implemented this oAuth as you have shown . I see that the service is getting invoked using bearer token as well as using basic auth .
    1) Is there a way we can disable basic Auth for the REST service in OIC
    2) And can we enable OAuth for a specific REST service , currently I see it is all or none.
    Your valuable comments appreciated

    • @TechSupper
      @TechSupper  3 ปีที่แล้ว +1

      Yes, its there in the recent version of OIC, while you create the REST Trigger connection, you have an option to select from the Security Policy. Please check.

  • @gandikotaram4740
    @gandikotaram4740 2 ปีที่แล้ว

    Excellent video.... which was very helpful for me to implement Oauth security in project

    • @TechSupper
      @TechSupper  2 ปีที่แล้ว

      Glad it was helpful!

  • @venki5736
    @venki5736 8 หลายเดือนก่อน

    Thank you so much for the detailed demo, it's very helpful.

    • @TechSupper
      @TechSupper  8 หลายเดือนก่อน

      Glad it was helpful!

  • @MohsinKhanSC
    @MohsinKhanSC 4 ปีที่แล้ว

    Hi Ankur,
    This was really helpful. Thanks for sharing this with us.

  • @SanatanWarrior575
    @SanatanWarrior575 3 ปีที่แล้ว

    Thank You Ankur.
    Nice Explanation sir.
    Regards.
    Sandeep

    • @TechSupper
      @TechSupper  3 ปีที่แล้ว

      Thanks and welcome

  • @krishnarathor3006
    @krishnarathor3006 ปีที่แล้ว

    What are security parameters we need to configure a oauth 2 type connection ,like for hcm adapter and soap adapter

    • @TechSupper
      @TechSupper  ปีที่แล้ว

      You need to provide oauth details such as client id, client secret, etc.

  • @visitermanvisiterman8513
    @visitermanvisiterman8513 ปีที่แล้ว

    hi Ankur, for external consumer of oic , is it needed to take access to IDCS REST token generator,?

  • @krishnarathor3006
    @krishnarathor3006 ปีที่แล้ว

    In case of rest api for hcm how to pass this bearer and token value in rest adapter,we have oauth 2. Working for hcm adapter, but not for hcm rest api, what would you suggest here

    • @TechSupper
      @TechSupper  ปีที่แล้ว

      You can create hcm connection with Oauth 2.0 policy.

  • @gnanuyadav7795
    @gnanuyadav7795 ปีที่แล้ว

    Hi Ankur,
    I have followed all the steps but when I try to invoke a app driven orchestration I'm getting an error saying Error 415--Unsupported Media Type. Could you please help.

    • @TechSupper
      @TechSupper  ปีที่แล้ว

      Please check the request header content-type what is set and what is expected by app driven orchestration.

  • @krishnarathor3006
    @krishnarathor3006 ปีที่แล้ว

    Hi ankur, im exposing rest adapter as oauth and trigger type,so how will other application connect with oic in this case?do i need to share any details with them??

    • @TechSupper
      @TechSupper  ปีที่แล้ว +1

      Yes Krishna, all the details to generate token, you will have to share.

    • @krishnarathor3006
      @krishnarathor3006 ปีที่แล้ว

      ​@@TechSupper can I convert text to json in oic??

  • @Oracle_Jobloyee
    @Oracle_Jobloyee ปีที่แล้ว

    Hi
    It's really a good video. I am following similar steps and trying to import a certificate but getting ' Failed to parse certificate data.'
    Can you guide how to solve this issue?
    Thanks

  • @bangalorelord7398
    @bangalorelord7398 3 ปีที่แล้ว

    Hi Ankur,
    Thank you so much for your informative videos. Instead of exposing the scope for all the integrations, is there a way to expose only some integrations.?

    • @TechSupper
      @TechSupper  3 ปีที่แล้ว

      Check out this blog mytechretreat.com/limit-access-to-your-apis-with-oci-api-gateway-using-oaauth-2-0-scopes/

  • @SouravDey85
    @SouravDey85 2 ปีที่แล้ว

    Very informative video, Thank you

    • @TechSupper
      @TechSupper  2 ปีที่แล้ว

      Glad it was helpful!
      Please subscribe to my TH-cam channel th-cam.com/users/Techsupper if you have not subscribed yet.

  • @PoonamGupta-vz1ei
    @PoonamGupta-vz1ei ปีที่แล้ว

    Hi can you please show a demo for export packages as well , after getting bearer token..

    • @TechSupper
      @TechSupper  ปีที่แล้ว

      You can use export package rest api tp export the pacakge:
      docs.oracle.com/en/cloud/paas/integration-cloud/rest-api/op-ic-api-integration-v1-packages-archive-post.html

  • @SMondalYT
    @SMondalYT ปีที่แล้ว

    Hi Ankur,
    You explained it well. I have a concern on token expiration. Suppose our integration with REST trigger is to be used by a 3rd party application , can the same token be used as long as they want ?
    Thanks

    • @TechSupper
      @TechSupper  ปีที่แล้ว

      The token has limited time, once the token is expired, the token has to be regenerated...

    • @SMondalYT
      @SMondalYT ปีที่แล้ว

      @@TechSupper got it. Thanks. I appreciate

  • @RaHuLSaHa-cu5zm
    @RaHuLSaHa-cu5zm 3 ปีที่แล้ว

    Hi Ankur , is there a way to tie scopes with integration services . Like for say 3 integration there will be a client id and token . For other 3 integration there will be another set of client id and token .

    • @TechSupper
      @TechSupper  3 ปีที่แล้ว

      I'll check Rahul.

    • @RaHuLSaHa-cu5zm
      @RaHuLSaHa-cu5zm 3 ปีที่แล้ว

      @@TechSupper yes plz because ultimately if we cannot differentiate integrations with different scopes then the whole purpose of oAuth enablement has no meaning ...

  • @mitjasan3000
    @mitjasan3000 2 ปีที่แล้ว

    Is it possible to call rest api (trigger) without security - public or private? Thanks

    • @TechSupper
      @TechSupper  2 ปีที่แล้ว

      No, this is not possible to create un-secured REST API in OIC.
      Please subscribe to my TH-cam channel th-cam.com/users/Techsupper if you have not subscribe yet.

  • @HarshDamania
    @HarshDamania 2 ปีที่แล้ว

    Can i generate access token from azure ad and use it in oracle endpoint ?

    • @TechSupper
      @TechSupper  2 ปีที่แล้ว

      No, you have to federate the OCI tenancy first.

  • @abhishek-bb6vg
    @abhishek-bb6vg 3 ปีที่แล้ว

    Hi Ankur, how do we get the scope of the application. Is that something which system generated?

    • @TechSupper
      @TechSupper  3 ปีที่แล้ว

      I'll have to check.

  • @klokov9
    @klokov9 3 ปีที่แล้ว

    Hi Ankur, thanks for the great video! I have one issue - i am getting 'Bad Request' in the Postman ' "the request can not be fulfilled due to bad syntax", do you have an idea which syntax (where) it might be reffering to? Can you please help me

    • @klokov9
      @klokov9 3 ปีที่แล้ว

      Sorry, Ankur, my fault! It is working fine, just some typo

    • @TechSupper
      @TechSupper  3 ปีที่แล้ว

      NP

  • @santanchalla4652
    @santanchalla4652 7 หลายเดือนก่อน

    OATUH is Open Authorization - Do you need correction?

    • @TechSupper
      @TechSupper  7 หลายเดือนก่อน

      Sure thanks

  • @orlandodure407
    @orlandodure407 2 ปีที่แล้ว

    Hi Ankur, Can I implement this kind method of authentication from the workspace or it is only available for Oracle Cloud?

    • @TechSupper
      @TechSupper  2 ปีที่แล้ว

      Which workspace you are talking about ?

    • @orlandodure407
      @orlandodure407 2 ปีที่แล้ว

      @@TechSupper The workspace provided by Oracle Apex with the ORDS,

    • @TechSupper
      @TechSupper  2 ปีที่แล้ว

      I don't think so.

    • @orlandodure407
      @orlandodure407 2 ปีที่แล้ว

      Ok, thanks sir

  • @yashikabalaji325
    @yashikabalaji325 3 ปีที่แล้ว

    Hi Ankur,
    Can you please tell me how an trigger endpoint is getting triggered ( based on which event/ business object) where we are mentioning that in connection?
    This is a general question not related to this video

    • @TechSupper
      @TechSupper  3 ปีที่แล้ว

      Do you have REST based integration or event based?

    • @yashikabalaji325
      @yashikabalaji325 3 ปีที่แล้ว

      @@TechSupper Thank you for your quick reply:)
      I am a beginner
      I can understand that scheduled driven orchestration , we are scheduling the integration when to run
      But in App driven orchestration ,we are not giving any such details... It's been mentioned like it's an event based or Business object based.. but I could not get where a developer is mentioning the condition to trigger app driven one
      It would be very helpful if you could have explain with example

    • @TechSupper
      @TechSupper  3 ปีที่แล้ว

      Hi,
      There is online course of Oracle Integration for beginners, if you want to learn from scratch, buy this course using below link
      www.eduonix.com/learn-oracle-integration-cloud
      Apply coupon code “ OICLEARN7” to avail discount.

    • @yashikabalaji325
      @yashikabalaji325 3 ปีที่แล้ว

      @@TechSupper Thank you , will check

  • @luisricardo5522
    @luisricardo5522 8 หลายเดือนก่อน

    Can I use this access token to request key vault?

  • @klokov9
    @klokov9 3 ปีที่แล้ว

    Hi Ankur, can you please help me a bit - how to register the custom integration as an API, in other words when I select "Add scope' - i will see that scope for my custom integration so that i can add it, if this makes sense? Thank you, Anatoliy

    • @TechSupper
      @TechSupper  3 ปีที่แล้ว

      I couldn't understand your question. Can you please describe it.

  • @ahmedhussein5848
    @ahmedhussein5848 ปีที่แล้ว

    Hello Ankur,
    can i use Oauth client credintial instead of password credintial?

    • @TechSupper
      @TechSupper  ปีที่แล้ว

      Yes, you can use

    • @ahmedhussein5848
      @ahmedhussein5848 ปีที่แล้ว

      I tried to use client credential,
      when tested from postman with authorization type Oauth2, grant type Client Credential, it give me 401

    • @TechSupper
      @TechSupper  ปีที่แล้ว

      I recently uploaded a course on a Udemy, you can buy the same to meet your requirement. Following is the URL to buy:
      www.udemy.com/course/deep-dive-into-oracle-integration/?referralCode=26194341D09D3B93921F

    • @rahulpaul6882
      @rahulpaul6882 ปีที่แล้ว +1

      @@ahmedhussein5848 you can add the serviceInvoker or ServiceUser role to the application to overcome the issue.

  • @viniciusnavarini9765
    @viniciusnavarini9765 3 ปีที่แล้ว

    hello, how do i create a standalone user and what do i spend on the postman in the username and password cheat?

    • @TechSupper
      @TechSupper  3 ปีที่แล้ว

      What do you mean by standalone user.

  • @rahulpaul6882
    @rahulpaul6882 ปีที่แล้ว

    Hi Ankur, Thanks for this helpful video. I am able to get the Bearer token, but while calling my rest apis with that getting 401, can you please help on this.

    • @TechSupper
      @TechSupper  ปีที่แล้ว

      Not sure what mistake you did, but plz follow all the steps correctly.
      You can buy my OIC Gen-3 course that will help you to fast track your OIC learning journey:
      www.udemy.com/course/deep-dive-into-oracle-integration/?referralCode=26194341D09D3B93921F

    • @rahulpaul6882
      @rahulpaul6882 ปีที่แล้ว

      @@TechSupper
      To get the Bearer token I am not using the grant_type as password, instead of that I am using client_credential. Because out client will not be a user and if they have the userid and password.

    • @MuhammadKaleem-ng7sd
      @MuhammadKaleem-ng7sd 8 หลายเดือนก่อน

      @@rahulpaul6882 any luck. I am also facing the same issue in G3 integration REST connection to update lookup values with integration

  • @nishanksaxena228
    @nishanksaxena228 4 ปีที่แล้ว

    Hi Ankur thanks for sharing the knowledge, have one doubt is there any way we dont have to give OIC username & password in oauth token call?

    • @TechSupper
      @TechSupper  4 ปีที่แล้ว

      I'll check and will get back

    • @sivakm1617
      @sivakm1617 4 ปีที่แล้ว +2

      Please create a stand-alone user in IDCS and assign the user in Oauth application. This will allow only the particular user to request token by passing stand alone user credentials instead of sending OIC credentials.
      If required, you can checkmark "Enforce Grant as Authorization". This will allow only a particular assigned user to request a token with the credentials.

  • @konamanasa
    @konamanasa 4 ปีที่แล้ว

    Hi Ankur,
    This was really Helpful. Thank You, Can you Please share how to do for 'client_credentials'.

    • @TechSupper
      @TechSupper  4 ปีที่แล้ว

      Try client_credential while you create an application in IDCS.

  • @rafiansari2002
    @rafiansari2002 3 ปีที่แล้ว

    Hi Ankur - hope you are doing great... could you please help me how I can integrate Jira tool with OIC...?

    • @TechSupper
      @TechSupper  3 ปีที่แล้ว +1

      If JIRA provides REST API, you can use REST APIs to integrate JIRA.

    • @rafiansari2002
      @rafiansari2002 3 ปีที่แล้ว

      @@TechSupper Thanks Ankur. How i can connect with you? Could you please DM your contact number?

    • @TechSupper
      @TechSupper  3 ปีที่แล้ว

      Please drop your what's app number.

  • @shivammalhotra3219
    @shivammalhotra3219 3 ปีที่แล้ว

    What is the password and username here I need to add?

    • @TechSupper
      @TechSupper  3 ปีที่แล้ว

      This will be the oic username and password.

  • @krishnarathor3006
    @krishnarathor3006 ปีที่แล้ว

    Hi ankur can i have ur number ,im ready to pay consultation fees also ,i have doubt like can we use oauth to secure hcm adapter also or is oauth specific to rest api only

    • @TechSupper
      @TechSupper  ปีที่แล้ว

      Please share your number or send me an email at techsupper.ts@gmail.com