Re: [Dev] How to exchange a SAML2 bearer token with OAuth2 token

Mon, 18 Apr 2016 00:24:07 -0700 

As far as I remember you need to split the headers in the curl command:
curl -k -d "grant_type=urn:ietf:params:oauth:grant-type:saml2-bearer&assertion=[...]&scope=PRODUCTION" -H "Authorization: Basic VWhXczlIN2xPaTlOMGJZM1pfdUswVW41OU93YTpKcTdMNFdzZHg5SER3TGx3TnVERVkxdVl4UUFh" -H "Content-Type: application/x-www-form-urlencoded" https://localhost:8243/token 

El 18/04/2016 a las 4:22, Geesara Prathap escribió:

Hi All,


As an example, I enabled SSO in Dashboard Server and registered the 
portal app with the Identity Server by creating a service provider. So 
I was able to get SAML bearer assertion in SAML response. Then created 
an application in API Manager and  combined the consumer key and 
consumer secret keys as consumer-key:consumer-secret then encoded the 
combined string using base64. After that filtered out SAML bearer 
assertion from SAML response and encoded into base64-URL.


SAML  bearer assertion


<saml2:Assertion ID="iddkjncialbbnlpfjhmkjhebojbpkhfppjglhfga" 
IssueInstant="2016-04-17T15:31:00.991Z" Version="2.0" 
xmlns:saml2="urn:oasis:names:tc:SAML:2.0:assertion"><saml2:Issuer 
Format="urn:oasis:names:tc:SAML:2.0:nameid-format:entity">localhost</saml2:Issuer><ds:Signature 
xmlns:ds="http://www.w3.org/2000/09/xmldsig#";><ds:SignedInfo><ds:CanonicalizationMethod 
Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/><ds:SignatureMethod 
Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/><ds:Reference 
URI="#iddkjncialbbnlpfjhmkjhebojbpkhfppjglhfga"><ds:Transforms><ds:Transform 
Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><ds:Transform 
Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></ds:Transforms><ds:DigestMethod 
Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><ds:DigestValue>fk3OExA6WC93w7o7ckZudmP4N3Q=</ds:DigestValue></ds:Reference></ds:SignedInfo><ds:SignatureValue>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</ds:SignatureValue><ds:KeyInfo><ds:X509Data><ds:X509Certificate>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</ds:X509Certificate></ds:X509Data></ds:KeyInfo></ds:Signature><saml2:Subject><saml2:NameID 
Format="urn:oasis:names:tc:SAML:1.1:nameid-format:emailAddress">admin@carbon.super</saml2:NameID><saml2:SubjectConfirmation 
Method="urn:oasis:names:tc:SAML:2.0:cm:bearer"><saml2:SubjectConfirmationData 
InResponseTo="ghmnopmcckmfdgkbncdbfaddoablkleedohalfib" 
NotOnOrAfter="2016-04-17T15:36:00.991Z" 
Recipient="https://localhost:9443/portal/acs"/></saml2:SubjectConfirmation><saml2:SubjectConfirmation 
Method="urn:oasis:names:tc:SAML:2.0:cm:bearer"><saml2:SubjectConfirmationData 
InResponseTo="ghmnopmcckmfdgkbncdbfaddoablkleedohalfib" 
NotOnOrAfter="2016-04-17T15:36:00.991Z" 
Recipient="https://localhost:9443/oauth2/token"/></saml2:SubjectConfirmation></saml2:Subject><saml2:Conditions 
NotBefore="2016-04-17T15:31:00.991Z" 
NotOnOrAfter="2016-04-17T15:36:00.991Z"><saml2:AudienceRestriction><saml2:Audience>portal</saml2:Audience><saml2:Audience>https://localhost:9443/oauth2/token</saml2:Audience><saml2:Audience>carbonServer</saml2:Audience></saml2:AudienceRestriction></saml2:Conditions><saml2:AuthnStatement 
AuthnInstant="2016-04-17T15:31:00.992Z" 
SessionIndex="2211a42e-d554-4e94-a59a-5269b920a3e7"><saml2:AuthnContext><saml2:AuthnContextClassRef>urn:oasis:names:tc:SAML:2.0:ac:classes:Password</saml2:AuthnContextClassRef></saml2:AuthnContext></saml2:AuthnStatement></saml2:Assertion>




To exchange the SAML2 bearer token for an OAuth2.0 access token, this 
is the command I used.



curl -k -d 
"grant_type=urn:ietf:params:oauth:grant-type:saml2-bearer&assertion=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%2BPGRzOlNpZ25hdHVyZU1ldGhvZCBBbGdvcml0aG09Imh0dHA6Ly93d3cudzMub3JnLzIwMDAvMDkveG1sZHNpZyNyc2Etc2hhMSIvPjxkczpSZWZlcmVuY2UgVVJJPSIjaWRka2puY2lhbGJibmxwZmpobWtqaGVib2picGtoZnBwamdsaGZnYSI%2BPGRzOlRyYW5zZm9ybXM%2BPGRzOlRyYW5zZm9ybSBBbGdvcml0aG09Imh0dHA6Ly93d3cudzMub3JnLzIwMDAvMDkveG1sZHNpZyNlbnZlbG9wZWQtc2lnbmF0dXJlIi8%2BPGRzOlRyYW5zZm9ybSBBbGdvcml0aG09Imh0dHA6Ly93d3cudzMub3JnLzIwMDEvMTAveG1sLWV4Yy1jMTRuIyIvPjwvZHM6VHJhbnNmb3Jtcz48ZHM6RGlnZXN0TWV0aG9kIEFsZ29yaXRobT0iaHR0cDovL3d3dy53My5vcmcvMjAwMC8wOS94bWxkc2lnI3NoYTEiLz48ZHM6RGlnZXN0VmFsdWU%2BZmszT0V4QTZXQzkzdzdvN2NrWnVkbVA0TjNRPTwvZHM6RGlnZXN0VmFsdWU%2BPC9kczpSZWZlcmVuY2U%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%2BPC9kczpLZXlJbmZvPjwvZHM6U2lnbmF0dXJlPjxzYW1sMjpTdWJqZWN0PjxzYW1sMjpOYW1lSUQgRm9ybWF0PSJ1cm46b2FzaXM6bmFtZXM6dGM6U0FNTDoxLjE6bmFtZWlkLWZvcm1hdDplbWFpbEFkZHJlc3MiPmFkbWluQGNhcmJvbi5zdXBlcjwvc2FtbDI6TmFtZUlEPjxzYW1sMjpTdWJqZWN0Q29uZmlybWF0aW9uIE1ldGhvZD0idXJuOm9hc2lzOm5hbWVzOnRjOlNBTUw6Mi4wOmNtOmJlYXJlciI%2BPHNhbWwyOlN1YmplY3RDb25maXJtYXRpb25EYXRhIEluUmVzcG9uc2VUbz0iZ2htbm9wbWNja21mZGdrYm5jZGJmYWRkb2FibGtsZWVkb2hhbGZpYiIgTm90T25PckFmdGVyPSIyMDE2LTA0LTE3VDE1OjM2OjAwLjk5MVoiIFJlY2lwaWVudD0iaHR0cHM6Ly9sb2NhbGhvc3Q6OTQ0My9wb3J0YWwvYWNzIi8%2BPC9zYW1sMjpTdWJqZWN0Q29uZmlybWF0aW9uPjxzYW1sMjpTdWJqZWN0Q29uZmlybWF0aW9uIE1ldGhvZD0idXJuOm9hc2lzOm5hbWVzOnRjOlNBTUw6Mi4wOmNtOmJlYXJlciI%2BPHNhbWwyOlN1YmplY3RDb25maXJtYXRpb25EYXRhIEluUmVzcG9uc2VUbz0iZ2htbm9wbWNja21mZGdrYm5jZGJmYWRkb2FibGtsZWVkb2hhbGZpYiIgTm90T25PckFmdGVyPSIyMDE2LTA0LTE3VDE1OjM2OjAwLjk5MVoiIFJlY2lwaWVudD0iaHR0cHM6Ly9sb2NhbGhvc3Q6OTQ0My9vYXV0aDIvdG9rZW4iLz48L3NhbWwyOlN1YmplY3RDb25maXJtYXRpb24%2BPC9zYW1sMjpTdWJqZWN0PjxzYW1sMjpDb25kaXRpb25zIE5vdEJlZm9yZT0iMjAxNi0wNC0xN1QxNTozMTowMC45OTFaIiBOb3RPbk9yQWZ0ZXI9IjIwMTYtMDQtMTdUMTU6MzY6MDAuOTkxWiI%2BPHNhbWwyOkF1ZGllbmNlUmVzdHJpY3Rpb24%2BPHNhbWwyOkF1ZGllbmNlPnBvcnRhbDwvc2FtbDI6QXVkaWVuY2U%2BPHNhbWwyOkF1ZGllbmNlPmh0dHBzOi8vbG9jYWxob3N0Ojk0NDMvb2F1dGgyL3Rva2VuPC9zYW1sMjpBdWRpZW5jZT48c2FtbDI6QXVkaWVuY2U%2BY2FyYm9uU2VydmVyPC9zYW1sMjpBdWRpZW5jZT48L3NhbWwyOkF1ZGllbmNlUmVzdHJpY3Rpb24%2BPC9zYW1sMjpDb25kaXRpb25zPjxzYW1sMjpBdXRoblN0YXRlbWVudCBBdXRobkluc3RhbnQ9IjIwMTYtMDQtMTdUMTU6MzE6MDAuOTkyWiIgU2Vzc2lvbkluZGV4PSIyMjExYTQyZS1kNTU0LTRlOTQtYTU5YS01MjY5YjkyMGEzZTciPjxzYW1sMjpBdXRobkNvbnRleHQ%2BPHNhbWwyOkF1dGhuQ29udGV4dENsYXNzUmVmPnVybjpvYXNpczpuYW1lczp0YzpTQU1MOjIuMDphYzpjbGFzc2VzOlBhc3N3b3JkPC9zYW1sMjpBdXRobkNvbnRleHRDbGFzc1JlZj48L3NhbWwyOkF1dGhuQ29udGV4dD48L3NhbWwyOkF1dGhuU3RhdGVtZW50Pjwvc2FtbDI6QXNzZXJ0aW9uPg%3D%3D&scope=PRODUCTION" 
-H "Authorization: Basic 
VWhXczlIN2xPaTlOMGJZM1pfdUswVW41OU93YTpKcTdMNFdzZHg5SER3TGx3TnVERVkxdVl4UUFh, 
Content-Type: application/x-www-form-urlencoded" 
https://localhost:8243/token



But I am getting this response: 
*{"error":"invalid_client","error_description":"Client Authentication 
failed."}*


Is there any particular reason which causes this problem?

Thanks,
Geesara

--
Geesara Prathap Kulathunga
Software Engineer
WSO2 Inc; http://wso2.com
Mobile : +940772684174



_______________________________________________
Dev mailing list
Dev@wso2.org
http://wso2.org/cgi-bin/mailman/listinfo/dev



_______________________________________________
Dev mailing list
Dev@wso2.org
http://wso2.org/cgi-bin/mailman/listinfo/dev






















					Reply via email to