Forum Discussion

bigdaddyduergar's avatar
bigdaddyduergar
New Contributor
6 months ago

SoapUI OAUTH2 not calling endpoints correctly

This is an interesting issue we're running into. We're in the process of upgrading to SoapUI 5.7.2 from 5.4. Part of why we've been stuck on 5.4 is that getting oauth tokens seems to be broken in 5.7.2 for us, but not for every call. 

For example:

Environment 1:

Oauth2 Flow: Authorization Code Grant
Client Id = CID1
Client Secret = Secret1
AuthURL = https://environment1.company.com/tokenprovider/connect/authorize
TokenURL = https://environment1.company.com/tokenprovider/connect/token
Redirect URI = https://www.getpostman.com/oauth2/callback
Scope: authorization_code offline_access

When we call this endpoint I see the following in the logs, and we're able to log in:
2024-02-08 15:46:18 W3SVC1 [Server] [IP] GET /tokenprovider/connect/authorize?callback scope=authorization_code%20offline_access&response_type=code&redirect_uri=https%3A%2F%2Fwww.getpostman.com%2Foauth2%2Fcallback&client_id=CID1 80 - [IP] HTTP/1.1 Mozilla/5.0+(Windows+NT+10.0;+Win64;+x64)+AppleWebKit/610.1+(KHTML,+like+Gecko)+JavaFX/16+Safari/610.1
https://environment1.company.com/tokenprovider/ContextSelect
environment1.company.com

Environment 2:
Oauth2 Flow: Authorization Code Grant
Client Id = CID2
Client Secret = Secret2
AuthURL = https://environment2.company.com/tokenprovider/connect/authorize
TokenURL = https://environment2.company.com/tokenprovider/connect/token
Redirect URI = https://www.getpostman.com/oauth2/callback
Scope: authorization_code offline_access

When we call this, using the same test just changing the information in soapui it sends the following:
2024-02-08 15:48:17 W3SVC1 [Server] [IP] GET /tokenprovider/connect/authorize - 80 - [IP] HTTP/1.1 Java/16.0.2 - - environment2.company.com

Why would SoapUI include the bolded parameters in the first call and not the second call? Again, the only thing changing is the clientid, secret, and urls. Same test, same oauth2 flow, everything.

Is there a way to fix this or something that can be done to force it to add these parameters?