Rest API Add-on configuration

Support
1

Hi,
Am having an issue after adding the rest api add-on and configuring the application.properties file with the clientId and clientsecret properties, on running I get the following error when I try and get a token.
{
“error”: “unauthorized”,
“error_description”: “There is no client authentication. Try adding an appropriate authentication filter.”
}

Is there a configuration am missing?

2

How do you get the token (request URL, headers, body)?
What Jmix version are you using?

3

The curl to get the auth token is as follows:
curl --location --request POST ‘http://localhost:8080/oauth/token/’ \

–header ‘Authorization: Basic Y2xpZW50OnNlY3JldA==’ \

–header ‘Content-Type: application/x-www-form-urlencoded’ \

–data-urlencode ‘grant_type=password’ \

–data-urlencode ‘username=admin’ \

–data-urlencode ‘password=*****’

Am using jmix version 1.2.2

4

It looks correct.

Do you have these dependencies in build.gradle?

implementation("io.jmix.security:jmix-security-oauth2-starter")
implementation("io.jmix.rest:jmix-rest-starter")

Maybe you have some custom security configuration?

5

I have the dependencies configured. I do not have a custom security configuration. I have tested the same with a new project, one entity and the rest api addon configured with the settings as earlier indicated and I get same results.

6

If you have a test project, please attach it here.

7

sample_rest_project.zip (279.6 KB)

8

Thanks for the project.
I’ve run it and got the token without any problems:

% curl -X POST http://localhost:8080/oauth/token \
   --basic --user client:secret \
   -H "Content-Type: application/x-www-form-urlencoded" \
   -d "grant_type=password&username=admin&password=admin"

{"access_token":"etfRDzSEE6RK8LMBMz8u6EjRdfk","token_type":"bearer","refresh_token":"zPH1mvijKHSESjH3ksfgEQQ3W1I","expires_in":43199,"scope":"api","OAuth2.SESSION_ID":"D3204A4F4358EEE2A99DF702F0E4086A"}

Please make sure you use curl correctly. If you are on Windows, remove \ symbols and write the command in a single line.

9

Thanks very much

12

Does it work on Jmix 2.2.1 ?

13

No, currently Jmix 2.2 supports only Client Credentials and Auth Code grants, see Access Control :: Jmix Documentation

But we are going to implement Resource Owner Password Credentials grant in the next release 2.3 in June 2024, see Implement Resource owner password credentials grant in Authorization server add-on · Issue #2499 · jmix-framework/jmix · GitHub

1 Like