Breaking News: Grepper is joining You.com. Read the official announcement!

To verify that the scope-based authorization works

Pragya Keshap answered on February 18, 2023 Popularity 1/10 Helpfulness 1/10

answer To verify that the scope-based authorization works

To verify that the scope-based authorization works

Comment

# Verify that a request without access token fails on 401, Unauthorized
assertCurl 401 "curl -k https://$HOST:$PORT/product-composite/$PROD_ID_REVS_RECS -s"

# Verify that the reader client with only read scope can call the read API but not delete API
READER_ACCESS_TOKEN=$(curl -k https://reader:secret@$HOST:$PORT/oauth2/token -d grant_type=client_credentials -s | jq .access_token -r)
READER_AUTH="-H \"Authorization: Bearer $READER_ACCESS_TOKEN\""

assertCurl 200 "curl -k https://$HOST:$PORT/product-composite/$PROD_ID_REVS_RECS $READER_AUTH -s"
assertCurl 403 "curl -k https://$HOST:$PORT/product-composite/$PROD_ID_REVS_RECS $READER_AUTH -X DELETE -s"

Popularity 1/10 Helpfulness 1/10 Language whatever

Source: Grepper

Tags: authorization verify whatever

Link to this answer
Share Copy Link

Contributed on Feb 18 2023

Pragya Keshap

0 Answers Avg Quality 2/10

To verify that the scope-based authorization works

Contents

More Related Answers

To verify that the scope-based authorization works

Grepper

Documentation

Social

Legal

Contact

Oops, You will need to install Grepper and log-in to perform this action.