POSTMAN OAUTH call with custom scopes

[Steven_UM]

Hi,

I am using POSTMAN to test a custom build NODE.JS API app which is running on SAP CloudFoundry.

I can get an OAUTH token and call my API methods. Unfortunately I am getting back a custom error telling me that I am lacking the necessary authorization ( custom scopes ). Glad that this works fine 🙂

I have tried to add my custom scopes in the scope request field - using all kind of combinations - with and without xsappname , instance appname ( so with '!<number>' - nothing works ... I always getting back an error stating "Invalid Scope"

I remembered having the same issue on my local HANA Express instance and there I switched to grant type 'password credentials' and used my user to get the OAUTH - that gave me then all the configured role scopes.

I tried using this as well on CF but I get back the error 'The client is not authorized for any identity provider that supports password grant.'. It is worthwhile mentionning that I have configured SAP IDP as an alternative trusted identity provider.

Any suggestions on how to either include my custom scopes or swith to the other grant type ?

Thanks,

Steven

[boudhayan-dev]

Any luck with this ?

[sucheno]

Hi steven.desaeger, Hi boudhayan_dev,

Did you manage to solve this issue? I am also facing the same issue.

Thanks advanced to share the solution if you have found out.

Regards,

Suchen.

[Steven_UM]

Unfortunately no solution for this.

I ended up implementing a swagger UI for the node.js API and use that for testing purposes. As it runs directly on the server (within the same MTA) there is no issue with authentication.

[Steven_UM]

Nope .. unfortunately no response whatsoever 🙂