ReadyAPI: Using automated Authorization from Auth Repository

[AboveAndBeyond]

Hi all (  @TanyaGorbunova  @Nastya_Khovrina   @nmrao   ....)

I've tried to use Auhtorization OAuth 2.0 to set it in Auth Repository level to be able to use this in a different projects but the automations doesn't seem to work.

On Auth Repository I've added a OAuth 2.0 profile. The Get Access Token has an OAuth 2 Flow = Client Credentials Grant. Client identification and client secret are filled in, Access Token URL is pointing to our access token URL. When I click the 'Get Access Token" the token is generated successfully.

I've saved this.

I've created 2 environments (TA and INT) that I initiated with Authorization Profile AdminV2.0 as per created on Auth Repository. The environments are set on 'Inherit from parent' automatically when I select my profile.

But, when I close ReadyAPI at evening and re-open in the morning I notice that I've lost the token value as it only substains for 3000sec. Not a problem, though I would like to automate it to check on startup that the token is still valid.

So In the documentation on SmartBear I saw the automation code for webbased authentication. My URL is not really a webpage. I get response from our server by forward proxy in the form of a webpage. It's just a page with data. But the only 'login' that is necessary is not a password and login name but the token generated at Auth Report level.

Does someone know how to write that script that I can put in the [  Auth Repository > Profile created > Automation scripts ]    ?

Or isn't that the way to automate the token to use in all projects?

Thanks in advance for reading this, I hope I was a little clear...

Cheers, AAB

[New2API]

@AboveAndBeyond, I never used scripts in authmanager section. However, I jave implemented OAuth2.0 token retreival from event handler scripts. 

please check this page: 

https://support.smartbear.com/readyapi/docs/requests/auth/types/oauth2/automate/sample.html

hope this helps.

[AboveAndBeyond]

@New2API  thanks for your time, but no, that doesn't help as that script is for webpages with forms and a login name and password. I need to use tokens generated from OAuth2.

Kind regards,

AboveAndBeyond

[New2API · Accepted solution]

@AboveAndBeyond, I believe the script you are looking is under "Calling the Automated Retreival Procedure".

// Import the required classes
import com.eviware.soapui.impl.rest.actions.oauth.OltuOAuth2ClientFacade;
import com.eviware.soapui.support.editor.inspectors.auth.TokenType;
import com.eviware.soapui.model.support.ModelSupport;

// Set up variables
def project = ModelSupport.getModelItemProject(context.getModelItem());
def authProfile = project.getAuthRepository().getEntry("OAuth 2");
def oldToken = authProfile.getAccessToken();
def tokenType = TokenType.ACCESS;

// Create a facade object
def oAuthFacade = new OltuOAuth2ClientFacade(tokenType);

// Request an access token in headless mode
oAuthFacade.requestAccessToken(authProfile, true, true);

// Wait until the access token gets updated
while(oldToken == authProfile.getAccessToken()) {
}
//The sleep method can be used instead of a while loop
//sleep(3000);

// Post the info to the log
log.info("Set new token: " + authProfile.getAccessToken());

[AboveAndBeyond]

@New2API 

Thank you!

Now I see, for each project you need to set up an event. I thought that I only had to do this once and this would count for each project that I created. So Now it should work.

Kind regards,

AboveAndBeyond

[richie]

@NewAPI,

Great post! I've bookmarked this for the next time i deal with OAuth v2.0. A lot of people query the OAuth v2.0 token refresh so hopefully your post will help everyone out!

Cheers,

Rich