Summary

• Page properties (1 modified, 0 added, 0 removed)

Details

Page properties

Content

...	...	@@ -20,3 +20,54 @@
20	20	== Registering an application in the Catalogue ==
21	21
22	22	The Community Apps Catalogue is the place where collab authors look for applications to add to their collabs.
	23	+
	24	+{{error}}
	25	+TODO: describe the steps to register an app in the Catalogue
	26	+{{/error}}
	27	+
	28	+== Creating your OpenID Connect client ==
	29	+
	30	+The steps to create an OpenID Connect client are the following:
	31	+
	32	+* get an access token from the `developer` client
	33	+* use the token to call the create endpoint
	34	+* save your registration access token for further modify your client
	35	+
	36	+=== Fetching your developer access token ===
	37	+
	38	+In order to get your developer token, you need to authenticate against the developer client with the password grant.
	39	+
	40	+This can be achieved with this sample bash script:
	41	+
	42	+{{code language="bash"}}
	43	+# Gather username and password from user
	44	+echo 'Enter your username' && read clb_dev_username &&
	45	+echo 'Enter your password' && read -s clb_dev_pwd &&
	46	+
	47	+# Fetch the token
	48	+curl -X POST https://iam.humanbrainproject.eu/auth/realms/hbp/protocol/openid-connect/token \
	49	+ -u developer: \
	50	+ -d 'grant_type=password' \
	51	+ -d "username=${clb_dev_username}" \
	52	+ -d "password=${clb_dev_pwd}"; \
	53	+
	54	+# Erase the credentials from local variables
	55	+clb_dev_pwd='';clb_dev_username=''
	56	+{{/code}}
	57	+
	58	+The response will be similar to:
	59	+
	60	+{{code language="json"}}
	61	+{
	62	+ "access_token": "eyJhbGci...",
	63	+ "expires_in": 108000,
	64	+ "refresh_expires_in": 14400,
	65	+ "refresh_token": "eyJhbGci...",
	66	+ "token_type": "bearer",
	67	+ "not-before-policy": 1563261088,
	68	+ "session_state": "0ac3dfcd-aa5e-42eb-b333-2f73496b81f8",
	69	+ "scope": ""
	70	+}
	71	+{{/code}}
	72	+
	73	+Copy the "access_token" value, it is the one that will be needed for the next step.