Jacky Phan さんのアクティビティ

Token Authentication using the REST API

Christopher Gillis — Thu, 02 May 2019 12:30:00 GMT

Aras Innovator introduced an Authentication Server feature in 11.0 SP12 and has been fleshing it out with each new service pack. In 11.0 SP15, it is possible to request an OAuth token from this server that can be used with the RESTful API as an alternative to basic authentication. Using tokens is preferred for external apps as they don't require you to keep your users' passwords in memory while your app runs. Because tokens expire after a set time, you can also rest assured that if a malicious party later acquires the token, they won't have access to your system.

In this blog post, we'll be going over examples of both requesting an OAuth token from the Aras Innovator server as well as using that token to authenticate additional requests. You can also check out this Authentication Example on GitHub for a simple app that will request a token and use that token to query the Parts in a database.

Register Your App

One of the features of the Authentication Server is to limit what apps can request a token. The Authentication Server keeps a list of registered apps that are able to request tokens, so external applications cannot get tokens by default. If you don't wish to do any additional configuration, you can use the default "IOMApp" client registry. However, we recommend adding a new client registry to register your app with the server by following the steps below.

Open the \OAuthServer\OAuth.config in your preferred text editor
Scroll down to the bottom until you see <clientRegistry id="IOMApp">
Copy this node and all of its child nodes
Paste them as a new section just below the original node
Give a new ID to this registry corresponding to the purpose of your app
Make sure this new registry has enabled="true"

Make note of the ID you give this new registry. You will need to use it in the body of your request for a token which is covered later in this blog.

Get the OAuthServer URL

The first thing we'll want to do is query for the location of the OAuthServer. Because Aras Innovator allows most of its components to exist on separate servers, the OAuthServer may not be available from the same server as our Instance URL. However, the Innovator Server does have a way to query for this information by appending /Server/OAuthServerDiscovery.aspx to the end of your Instance URL: http://localhost/InnovatorServer/Server/OAuthServerDiscovery.aspx .

If you're using something like Postman to follow along with this blog, you can simply perform a get request on this URL with an empty body. The result of this request should look something like below.

{
"locations": [
{
"uri": "http://localhost/InnovatorServer/oauthserver/"
}
]
}

The URL we will use is stored in the uri property of the JSON returned from our request. The JSON path you can use to retrieve this information is locations[0].uri.

Get the Token Endpoint

Now that we have the URL of the OAuthServer, we will need to retrieve the exact URL that we can use to query for the token. This next URL is based on the OpenID discovery specification. We will take the OAuthServer URL from our previous step and append .well-known/openid-configuration to the end of it: http://localhost/InnovatorServer/oauthserver/.well-known/openid-configuration. Again, we can query on this URL with a simple GET request without passing anything through the body.

The response to this request is significantly longer, but it should contain our token endpoint somewhere near the top.

{
"issuer": "OAuthServer",
"jwks_uri": "http://localhost/InnovatorServer/oauthserver/.well-known/openid-configuration/jwks",
"authorization_endpoint": "http://localhost/InnovatorServer/oauthserver/connect/authorize",
"token_endpoint": "http://localhost/InnovatorServer/oauthserver/connect/token",
"userinfo_endpoint": "http://localhost/InnovatorServer/oauthserver/connect/userinfo",
"end_session_endpoint": "http://localhost/InnovatorServer/oauthserver/connect/endsession",
...

The JSON path to retrieve this data is simply token_endpoint.

Get Token

The final request we'll use to retrieve our token will use the token endpoint URL retrieved in the previous step. Because this token will be linked to a user's credentials, we will need to pass in additional information before making our request. If you're following along with Postman, you can use the Multipart Form to specify the following pieces of information in your body.

grant_type : "password"
- Currently, I believe "password" is the only authentication type allows. Aras as a whole is moving towards more types of authentication in 12.0, so this is likely to change in the upcoming releases.
scope : "Innovator"
- The scope of information this token will be able to access. "Innovator" will be used for almost all purposes.
client_id : "IOMApp"
- The ID of your client app you configured in the first step of this blog.
username : "YOUR_USER_NAME"
- Any requests made using the returned token will share the same permissions as this user
password : "YOUR_MD5_HASHED_PASSWORD"
database : "YOUR_DATABASE_NAME"
- This should be the name of the database that this token will be able to access. "InnovatorSolutions" is the default name of Aras databases.

After configuring your body, you can send a POST request to the token endpoint URL with the body containing the properties defined above. The response will contain both the OAuth token as well as how long you will have until that token expires.

{
"access_token": "YOUR_TOKEN",
"expires_in": 3600,
"token_type": "Bearer"
}

The JSON path to this token will be access_token. By default, the IOMApp token expires in 3600 seconds or 1 hour.

Make Request with Token

If you've ever used our previous RESTful blog, you'll know that we authenticated previously by passing in the username and hashed password into the AUTHUSER and AUTHPASSWORD headers respectively. With the token, we will authenticate using the standard HTTP Authorization header. Token authentication using this header follows the format below.

Authorization : Bearer {YOUR_TOKEN}

Note that the word "Bearer" must come before your token in the header. If you're using Postman, there should be a way to configure authentication differently than other headers which should automatically add in this word for you. Alternatively, depending on the programming language you're using to perform this request, there may be a special authentication class or library which will automatically add "Bearer" into the header for you as well.

Regardless, once you have your Authorization header configured, you can follow along with our previous RESTful blog, and you should notice that you can query for all of the same information. You can also confirm that the permission model is still in place by querying for items to which you do not have access.

LOOKING FOR MORE ARAS INSPIRATION?

Subscribe to our blog and follow @ArasLabs on Twitter for more helpful content! You can also find our latest open-source projects and sample code on the Aras Labs GitHub page.

Batch Loader Utility: Automatically add extra characters if a cell contains double quotation mark

Jacky Phan — Thu, 27 Aug 2020 04:18:48 GMT

I'm using Batch Loader to import data into ARAS from a csv file. I notice that if a cell contains a double quotation mark ", the tool will automatically add some extra " to the content. It is an annoying behavior.

Example: A cell content in the CSV file is: This is test" field .

=> What is display in Batch Loader: "This is test"" field."

Does anyone know how to fix the problem? Thanks in advance.

Is this possible if get an ItemType inside another query within AML?

Jacky Phan — Tue, 28 Jul 2020 09:16:58 GMT

I have two ItemTypes Person and Address. There is a property Person.address_id that stores the config_id of an address, for a particular purpose it is just a string type, not refer ItemType. I use below query to select a person (*):

<Item action='get' type='PERSON' select ='address_id'>
<id>'abcdxyz'</id>
</Item>

I want to add some AML code to get Address Item with the id provided in above statement, something likes:

<Item action='get' type='ADDRESS'>
<id>The (*) query that returns an address id</id>
</Item>

I know that we can achieve the goal by writing a server method, but I just curious is there any way to get that within AML query?

Many thanks,

Error while doing mass promotion

Jacky Phan — Mon, 13 Apr 2020 04:18:33 GMT

I'm trying to do mass promotion but got following error after executed:

String or binary data would be truncated.
The statement has been terminated. in SQL: INSERT INTO [MPO_MASSPROMOTIONRECORD] ( [BEFORE_PROMOTE_ITEM_ID],[BEHAVIOR],[CONFIG_ID],[CREATED_BY_ID],[CREATED_ON],[CURRENT_STATE],[GENERATION],[GOT_COMMENT],[ID],[IS_CURRENT],[IS_PROMOTED],[IS_RELEASED],[ITEM_CONFIG_ID],[ITEM_KEYED_NAME],[KEYED_NAME],[LOCKED_BY_ID],[MAJOR_REV],[MANAGED_BY_ID],[MODIFIED_BY_ID],[MODIFIED_ON],[NEW_VERSION],[NOT_LOCKABLE],[OWNED_BY_ID],[PERMISSION_ID],[RELATED_ID],[SORT_ORDER],[SOURCE_ID],[STATE],[STATE_BEFORE],[STATUS_ERROR],[TEAM_ID] ) VALUES ( @p0,@p1,@p2,@p3,@p4,@p5,@p6,@p7,@p8,@p9,@p10,@p11,@p12,@p13,@p14,@p15,@p16,@p17,@p18,@p19,@p20,@p21,@p22,@p23,@p24,@p25,@p26,@p27,@p28,@p29,@p30 )

Anyone know how to fix it? Thanks.

Let me Help You

Mon, 13 Apr 2020 08:29:21 GMT

Answer a question that is verified as helpful or correct.

Jacky Phan

Jacky Phan — Mon, 13 Apr 2020 04:20:41 GMT

I have problem. can you Help me?

Former Member — Thu, 06 Sep 2018 06:54:04 GMT

Hello, I am trying to export a package. I get the following error: faultstring: RelationshipType with name=”ItemType_xPropertyDefinition” is not found. faultdetail: RelationshipType with name=”ItemType_xPropertyDefinition” is not found. faultcode: -1 How can I further analyze this error? thanks

Ask A Question I

Wed, 12 Dec 2018 22:58:43 GMT

Ask a question in a forum.

How to upload an image from local PC then assign it to a property type "Image"

Jacky Phan — Thu, 06 Dec 2018 04:18:05 GMT

I'm build an external .net tool using IOM dll. I have an item type "Company" contains a property type Image named "Picture", and in order to import data for Company I would like to upload an image from Local PC then set the uploaded one to Picture. I know that the behavior looks like "Select an image..." browser in ARAS Innovator, but I can't find the methods to do that. I have tried to upload a image to File Handing->Files first, then get its id, get the file item by this id and assign to Company but it doesn't work properly, example code:

Item company = inn.new("Company", "add"); // create new company Item file = Innovator.newItem("File", "get"); // get the file with id file.setID("Id of the image"); file = file.apply(); if(file.isError()) { return false; } company.setPropertyItem("Picture", file);

Any idea? Thanks in advanced.