Skip to Content
1
Aug 27, 2019 at 11:49 AM

POSTMAN OAUTH call with custom scopes

1074 Views

Hi,

I am using POSTMAN to test a custom build NODE.JS API app which is running on SAP CloudFoundry.

I can get an OAUTH token and call my API methods. Unfortunately I am getting back a custom error telling me that I am lacking the necessary authorization ( custom scopes ). Glad that this works fine :-)

I have tried to add my custom scopes in the scope request field - using all kind of combinations - with and without xsappname , instance appname ( so with '!<number>' - nothing works ... I always getting back an error stating "Invalid Scope"

I remembered having the same issue on my local HANA Express instance and there I switched to grant type 'password credentials' and used my user to get the OAUTH - that gave me then all the configured role scopes.

I tried using this as well on CF but I get back the error 'The client is not authorized for any identity provider that supports password grant.'. It is worthwhile mentionning that I have configured SAP IDP as an alternative trusted identity provider.

Any suggestions on how to either include my custom scopes or swith to the other grant type ?

Thanks,

Steven

Attachments