Eddy's profile - activity

Hello,

when logging out of our application, the Horizon IDM redirects to its own login screen.

We would like to redirect the user to our own application landing page. We are using an Angular directive that supports passing a logoutredirecturl parameter Authenticating AngularJS against OAuth 2.0 / OpenID Connect which results in the following request being logged in Keyrock:

"GET /auth/logout/?post_logout_redirect_uri=http%3A%2F%2Flocalhost%3A8080%2F HTTP/1.1" 302 0

How can I configure Keyrock to redirect to the desired URL? (if not by honoring the redirect request, at least by hardcoding it in its configuration file)

Thank you for your time.

Best, Edoardo

Ah, on the filesystem...

From src/wstore/offerings/offerings_management.py

def _save_encoded_image(path, name, data):
"""
Saves into the filesystem a base64 encoded image
"""
f = open(os.path.join(path, name), "wb")
dec = base64.b64decode(data)
f.write(dec)
f.close()

Any plans to replace this implementation with proper database persistency? MongoDB doesn't get offended by a couple MBs of binary data...

Hi,

I'm looking into using WStore to persist and lookup artifact data, including names, versions, descriptions, etc... I had a look at the MongoDB collections "wstoreoffering" and "wstoreresource" but couldn't find any binary, only URL paths.

My question is: where is the uploaded data effectively stored and how am I supposed to fetch it through the WStore REST API?

Best, Edoardo

Hello, not really (although we were considering using WMarket, but we had to abandon it as it doesn't support multiple markets.) I need to implement a "search by store" in WStore and found that Organizations somewhat matched my requirements. Any plans to search by organization name?

Have you tried checking the DNS configuration of the container? http://odino.org/cannot-connect-to-the-internet-from-your-docker-containers/

And on the other hand Keyrock demands request parameter based tokens, failing otherwise. I am having great difficulty setting up the Spring client in 1 coherent way; is it possible to configure either one to conform to the other?

Hello, thank you for your reply, I hadn't replied yet because I didn't have time to try my use-case within the context of your reply. Today I checked and I am getting HTTP 401 when I try to access a WStore API endpoint with a token from another application.

curl -X POST -H "Content-Type: application/json" -H "X-Auth-Token: 039eca7f72da471a889c217deff5d433" -d '{ "user" : { "name" : "ladida","password" : "ladida2016" }' works a charm. The user will not login because it doesn't belong to any org though.

Hello all,

I am trying to consume calls to WStore and WMarket from an application that has obtained a user token from a Keyrock account. I would like to know how to setup such a scenario (I expect each application to have its own registration in Keyrock, so how do I make it so that each application trusts the bearer token of the other or how do I obtain multiple tokens pointing to the same principal?)

I tried working with from the answer by @amagan but I'm still not seeing the desired result. I have registered 2 applications on a Keyrock instance: 1 for WStore and 1 for an API protected using Spring security and an Angular directive to fetch the token client side.

From the Spring side everything seems to work, the problem starts when I try to access the WStore API with the same token. All I get is HTTP 401:

[01/Apr/2016 09:22:28] "GET /api/administration/profiles/idm_user?access_token=SkLZ02Ybzm2ehisfkaw2VLUTz93Ncn HTTP/1.1" 401 57

Suggestions are warmly welcome!

TIA, Edoardo

Hello Aitor, thanks for your answer. It's not good news though...

Hi, let me explain: if I POST a new user to Keyrock with just a username and password, it won't allow me to consume the WStore API or login. If you create an account through the Keyrock UI the users will have other properties set so I was wondering which of these is making the difference.

Hi all,

I'm writing an API provider in Java Spring to orchestrate some Fiware GE APIs. I registered an application against my org in the Lab and - having read a bunch of tutorials, manuals, etc... - I was expecting everything to work, except it doesn't. :D

Basically Spring seems to be calling the URI https://account.lab.fiware.org/user withouth encoding the access_token - I suspect it's using an Authorization header with "bearer token" format.

Does anyone know what magic incantation is necessary to persuade Spring to append the token parameter? All I found online appears to assume that the User Info URI is always called as-is. :/

Hi all,

I have looked at the WMarket API and was wondering whether it is currently possible (or there are plans to add) to create and manage several "marketplaces" within the same instance. It is possible to create distinct "organizations" within the same WStore, so it's odd - indeed problematic, at least for me - that one cannot define multiple market organizations in WMarket. Does anyone know whether I have overlooked something or can provide some feedback?

Best, Edoardo

Hi all,

I was wondering whether WStore allowed to search by organization name. I looked around and while it's indeed possible to fetch a list of stores, I couldn't find a search functionality.

Are there plans to implement it?

TIA, Edoardo

Hi,

I'd like to programmatically create user accounts from our own app/api and got to the point I can indeed add users to my local (Fiware forked) keystone instance. Unfortunately these users remain useless because they get automatically logged out the moment they are successfully logged in.

Can anyone let me know what are the minimum user account properties needed to successfully login a user to WStore?

TIA, Edoardo

Well, it seems that Spring Security OAuth and the Fiware Lab configuration don't quite work with request param encoded auth_tokens, maybe there is a bug somewhere or I just couldn't figure it out.

For the time being, I worked around the issue by switching to Spring Social and writing a basic Fiware API provider.