Authentication

OAuth Authentication

Obtaining a New Token as a Portal User Using refresh_token

1. Enable the RefreshToken feature.
   1. On the Huawei Cloud Astro Zero console, click Access Homepage to go to the application development page.
   2. In the upper left corner of the page, click and choose Environments > Environment Configuration.
   3. In the navigation pane, choose System Settings > System Parameters.
   4. Click the Built-in System Parameters tab, search for bingo.service.refreshtoken.enable, and click the parameter name in the search result. On the parameter details page, click the edit icon next to Value, set the parameter to true, and click Save.
      Figure 8 Searching for bingo.service.refreshtoken.enable
      
      Figure 9 Changing the value to true
      

2. A portal user (for example, test_cs) uses the PORTALUSERLOGIN formula to log in to the platform.
   1. On the application page, click an application to access the application development platform.
   2. Move the pointer to a folder on the left, click + displayed, and choose Flow from the shortcut menu.
   3. Set Label to testPortalUserLogin and click the Name text box. The system automatically fills in the text box. Click Add.
   4. On the right of the flow editor page, click . On the Context page, click the plus sign (+) next to Formula.
   5. On the Formula page, set Name to portal, Data Type to Text, and Expression to PORTALUSERLOGIN("test_cs"), and click Save. test_cs in the expression indicates the name of the portal user used for logging in to the system.
      Figure 10 Creating a formula variable
      
   6. In the right pane of the flow editing page, click .
   7. On the Context pane, click the plus sign (+) next to Variable. A text variable named variable0 is created by default.
   8. In the right pane of the flow editing page, click and drag parameters from the Context pane to Output Parameters, as shown in the following figure.
      Figure 11 Setting the output parameter of the flow
      
   9. Drag the Assignment diagram element from Logic on the left to the canvas and set the Assignment diagram element as shown in the following figure.
      Figure 12 Configuring the Assignment diagram element
      
   10. Connect all elements.

       

   11. In the upper part of the page, click to save the flow.
   12. After the settings are saved, click and click the run button to run the flow without setting input parameters.

       If the following information is displayed, the portal user has logged in to the platform.

       {
         "interviewId": "002N000000jeTG4DKxSS",
         "outputs": {
           "variable0": "XXX"
         }
       }

       The value of variable0 is the access-token of the portal user.

   13. On the output page, press F12 or Ctrl+Shift+I to start the debugging tool.
   14. Obtain the value of refresh-token from Cookies.

       

3. Use Postman to send a request to obtain a new token.
   1. Download and install Postman on the local PC. This tool is used only for tests.
   2. Use Postman to send a POST request. Set the URL to https://Huawei Cloud Astro Zero domain name/baas/auth/v1.0/refreshtoken, set Content-Type in HEADERS to application/json, and set grant_type in BODY to refresh_token. The value of refresh_token is that of refresh-token obtained in 2.n. The output result is the new token. After you obtain a new token, the original token is invalidated no matter whether it has expired.
      Figure 13 Sending a request by using Postman
      

      Table 9 Request header

      Header	Description	Mandatory
      Content-Type	Parameter defined in the HTTP protocol, which identifies the format for parsing the returned content. This parameter must be set to application/json, indicating that the browser parses the returned content into a JSON object.	Yes

      Table 10 Message body

      Parameter	Description	Mandatory
      grant_type	Grant type. Set this parameter to refresh_token.	Yes
      refresh_token	Set this parameter to the value of refresh-token obtained in 2.n.	Yes