Created question in FIWARE Q/A platform on 03-01-2016 at 21:01
Please, ANSWER this question AT http://stackoverflow.com/questions/34581476/unable-to-authenticate-users-for-an-app-in-fiware-lab-keyrock-instance

Question:
Unable to authenticate users for an app in Fiware Lab KeyRock instance

Description:
I have registered two users in Keyrock (the global fiware labs instance at https://account.lab.fiware.org)

User Robin has an organisation Robin-Cloud
User Robin is owner of an application Babbler
The application Babbler has authorized users "Robin" and "Robin viewer" (see screenshot)
User "Robin viewer" is a member of the same organisation as user "Robin"
Just to be sure i authorized the whole organisation that "Robin viewer" belongs to.
Both users have the same roles.

I can authenticate user "Robin" using a shell script to get an Access token. In the shell script i pass in the Applications Client ID and Client secret. I also pass in the username and password of User "Robin". The shell script is here (altered copy of this https://raw.githubusercontent.com/Bitergia/fiware-chanchan-docker/master/images/pep-wilma/4.3.0/auth-token.sh ):

#!/bin/bash

if [ $# -lt 2 ] ; then
echo "auth-token: missing parameters."
echo "Usage: auth-token <user-email> <password>"
exit 1
fi

1. Retrieve X-Auth-Token to make request against the protected resource

function get_token () {

if [ $# -lt 2 ] ; then
echo "get_token: missing parameters."
echo "Usage: get_token <user-email> <password>"
exit 1
fi

local _user=$1
local _pass=$2

1. Retrieve Client ID and client Secret Automatically

CLIENT_ID="e2c095aa42414e75b9ac4d760f4c625a"
CLIENT_SECRET="****"

1. Generate the Authentication Header for the request

AUTH_HEADER="$(echo -n $

&client_secret=$

'"

1. Create the request

REQUEST="curl -s --insecure -i --header $

--header $

-X POST https://account.lab.fiware.org/oauth2/token -d $

"
XAUTH_TOKEN="$(eval $

"
echo "X-Auth-Token for '${_user}': $

"

}

get_token $1 $2

However

I cannot get an access token for User "Robin viewer". The message i get from Keyrock is:

{"error": {"message": "The request you have made requires authentication.", "code": 401, "title": "Unauthorized"}}

I assumed authorizing user "Robin viewer" for the Babbler app in the Keyrock user interface would be enough. What am i missing here?