How to register an app in UAA?

[samnan...@gmail.com]

I want to deploy https://github.com/ravanrijn/styx on my Cloud Foundry server. In the instruction, they mention about "Register Styx as client in the UAA"?

For example, my uaa url is http://uaa.aws.mydomain.com, so how do I register the app to get client id and client secret?

[Dr Nic Williams]

Samnang, currently afaik, client registration is only via the static config files (I don't know if the UAA plans to add "Register an application" UX; plus there is also the oauth2 service [2] which should be for app registration but I've never heard if it works or anyone using it).

If you're deploying UAA via bosh, then in your properties is a uaac.clients section:

Here is an example of register app client "login" - https://gist.github.com/drnic/5785295#file-cf-openstack-dns-small-yml-L296-L302

Nic

[1] For example, https://github.com/settings/applications/new

[2] https://github.com/cloudfoundry/cf-services-contrib-release/tree/master/src/services/oauth2

On Fri, Aug 30, 2013 at 5:08 AM, <samnan...@gmail.com> wrote:

I want to deploy https://github.com/ravanrijn/styx on my Cloud Foundry server. In the instruction, they mention about "Register Styx as client in the UAA"?

For example, my uaa url is http://uaa.aws.mydomain.com, so how do I register the app to get client id and client secret?

To unsubscribe from this group and stop receiving emails from it, send an email to vcap-dev+u...@cloudfoundry.org.

--

Dr Nic Williams

Stark & Wayne LLC - consultancy for Cloud Foundry users

http://drnicwilliams.com

http://starkandwayne.com

cell +1 (415) 860-2185

twitter @drnic

[Samnang Chhun]

Dr Nic, in your gist example file, I saw secret key, and is it I need to generate my own?

Is this look good for register styx client app?

styx:

  id: styx

  scope: openid

  authorities: oauth.login

  secret: HZtd2FyZS5jb20iL

  authorized-grant-types: authorization_code,client_credentials,refresh_token

  redirect-uri: http://console.aws.mydomain.com

-

Samnang

--

H.P (+855)16 701 721

Website:  http://wowkhmer.com
Twitter:    http://twitter.com/samnangchhun

LinkedIn: http://www.linkedin.com/in/samnangchhun

[Dr Nic Williams]

Also try this:

      styx:        id: styx

        override: true

        autoapprove: true

        authorities: scim.write,scim.read,cloud_controller.read,cloud_controller.write,password.write,uaa.admin,uaa.resource,cloud_controller.admin

        authorized-grant-types: authorization_code,client_credentials,password,implicit

        scope: openid,cloud_controller.read,cloud_controller.write,password.write

        access_token_validity: 1209600

        refresh_token_validity: 1209600

        secret: SOMETHINGNICEANDLOOOOOOOOONG

[Joel D'sa]

Hi Samnang, 

The API to manage clients is described at

https://github.com/cloudfoundry/uaa/blob/master/docs/UAA-APIs.rst#client-registration-administration-apis

You can use uaac and cf-uaa-lib to do this via the command line or API. To use the API, you need to authenticate as a client with clients.read and clients.write scopes. The bootstrap admin client has those scopes.

HTH.

- Joel

[Mike Heath]

You can use uaac (gem install cf-uaac). uaac will let you create an oauth client outside of the UAA config.

-Mike

[dvbala...@gmail.com]

Hi Friends,

Could anyone please help me, how to get Authorization Token for Cloud Foundry.

Thanks in advance,
Balaji.D

[dvbala...@gmail.com]

Hi Friends,

What are the required parameters in RestClient to get Authorization Token or access_token.

Thanks in advance,
Balaji.D

[Johannes Hiemer]

Hi Balaji,

honestly it is quite easy if you take a look at the source transferred when authenticating with cf.

Here you find an implementation I have done: https://github.com/jhiemer/cf-spring-web-management-console/blob/master/src/main/java/com/github/cfmc/api/repositories/UserRepository.java#L66

[Filip Hanik]

Docs are at

https://github.com/cloudfoundry/uaa/tree/master/docs

You are looking for

https://github.com/cloudfoundry/uaa/blob/master/docs/UAA-Tokens.md

and

https://github.com/cloudfoundry/uaa/blob/master/docs/UAA-APIs.rst#authentication-and-delegated-authorization-apis

--
You received this message because you are subscribed to the Google Groups "Cloud Foundry Developers" group.

To view this discussion on the web visit https://groups.google.com/a/cloudfoundry.org/d/msgid/vcap-dev/13b3ed0d-828f-4e97-a68b-0aafe86e987e%40cloudfoundry.org.

[Balaji D]

Really Helpful.

Thanks and Regards,

D.Balaji

--
You received this message because you are subscribed to a topic in the Google Groups "Cloud Foundry Developers" group.
To view this discussion on the web visit https://groups.google.com/a/cloudfoundry.org/d/msgid/vcap-dev/CANXYgqEX3ghmJPxTDDDaRobhcDPFEb_4aUdpYsnLA7cLCe%3Db0Q%40mail.gmail.com.