#Using the bms-mca-oauth-sdk npm module obtain an authorization header

The bms-mca-oauth-sdk enables you to obtain an authorization header from the Mobile Client Access Service. You can add this header to outgoing requests in order to pass the token validation with module bms-mca-token-validation-strategy

Installation

npm install bms-mca-oauth-sdk

Gettig the Authorization Header from a service using a secret

By using getAuthorizationHeader API, the SDK will use the clientid and secret from VCAP environemnt variable and generate an access token on behalf of this mobile backend application.

Sample usage

var express = require('express');
var oauthSDK = require('bms-mca-oauth-sdk');

var app = express();

app.get('/hello',
	function(req, res) {
		var options = {cacheSize:100};
		oauthSDK.getAuthorizationHeaderBySecret(options).then(function(authHeader) {
			res.send(200, authHeader);
		}, function(err) {
			console.log(err);
		});
});

Authorization Header propogation

By using getAuthorizationHeaderFromIncomingRequest API, the SDK can retrieve the authorization header from an incoming request. You can attach this authorization header to any outgoing request to access other resources protected by Mobile Client Access Service.

Sample usage

var express = require('express');
var oauthSDK = require('bms-mca-oauth-sdk');

var app = express();

app.get('/hello',
	function(req, res) {
		
		// obtain authorization header from incoming request
		var authorization = 
			oauthSDK.getAuthorizationHeaderFromIncomingRequest(req);
		
		res.send(200, authorization);
	});

Gettig the Authorization Header using a certificate

The SDK to get the IMF access token from IMF AZ server, which is used for Bluemix application or service

To make the SDK work successfully, the request must contain the authorization header, and the authorization header must contain one or two bearer tokens. If the authorization header only contains one bearer token, it will get the IMF access token when meeting when meeting the below requirement: a), There must have the folder 'imf_certificate' contains the files 'private-key.pem' and 'public-certificate.pem'. b), There must have the system variable 'imfServiceUrl'.

If the authorization header contains two bearer tokens, the first is the access token and the second is the id token. In this scenario, The SDK will forward the request with the authorization header to the IMF AZ server directly.

Service Flow

var express = require('express'),
    imf = require('bms-mca-oauth-sdk');

var app = express();

app.get('/v2/apps/:appid/hello',
	function(req, res) {
		var appId = req.params.apid;
		imf.getAuthorizationHeaderByCertificate({appId:appId,cacheSize:100}).then(function(token) {
			res.send(200, token);
		}, function(err) {
			console.log(err);
		});
	});

Admin UI Flow

var express = require('express'),
    imf = require('bms-mca-oauth-sdk');

var app = express();

app.get('/v2/apps/:appid/hello',
	function(req, res) {
		var appId = req.params.apid;
		var credential = req && req.headers && req.headers['Authorization'];
		imf.getAuthorizationHeaderByCertificate({appId:appId,credential:credential,cacheSize:100}).then(function(token) {
			res.send(200, token);
		}, function(err) {
			console.log(err);
		});
	});

Propogation

var express = require('express'),
    imf = require('bms-mca-oauth-sdk');

var app = express();

app.get('/v2/apps/:appid/hello',
	function(req, res) {
		var appId = req.params.apid;
		var credential = req && req.headers && req.headers['Authorization'];
		var authorization = imf.getAuthorizationHeaderFromIncomingRequest(req);
		res.send(200, authorization);
	});

License

This package contains sample code provided in source code form. The samples are licensed under the under the Apache License, Version 2.0 (the "License"). You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0 and may also view the license in the license.txt file within this package. Also see the notices.txt file within this package for additional notices.