Uploaded image for project: 'Help-Desk'
  1. Help-Desk
  2. HELP-8625

[Fiware-lab-help] FIWARE Lab Assistance

        Details

        • Type: extRequest
        • Status: Closed
        • Priority: Major
        • Resolution: Done
        • Fix Version/s: 2021
        • Component/s: FIWARE-TECH-HELP
        • Labels:
          None

          Description

          Dear Support,

          I am having trouble with getting list of organizations that I authorize in
          my application created with fiware account. I am getting 403 forbidden
          response.

          My request:

          GET
          /v3/OS-ROLES/organizations/role_assignments?application_id=xxxxxxxxxxxxxxxxxxx
          HTTP/1.1
          Host: cloud.lab.fiware.org:4730
          Content-Type: application/json
          X-Auth-Token: 0000000000000000
          Authorization: Basic
          ZWM2MWZlMGRkYmNlNGFjMzgwMTQ1N2UyYzEyNWNjYjI6MjgwN2Y0ZTA1NzFiNDYyMWFmMjhjYmRlMzg4YzdiNGY=

          In case I want to get list of roles, I am getting 200 response.

          GET /v3/OS-ROLES/roles?application_id=xxxxxxxxxxxxxxxxxxx HTTP/1.1
          Host: cloud.lab.fiware.org:4730
          Content-Type: application/json
          X-Auth-Token: 0000000000000000
          Authorization: Basic
          ZWM2MWZlMGRkYmNlNGFjMzgwMTQ1N2UyYzEyNWNjYjI6MjgwN2Y0ZTA1NzFiNDYyMWFmMjhjYmRlMzg4YzdiNGY=

          Authorization is with client id and client secret.

          Can you please help me? Is there something that I am missing?

          Thank you in advance

          Milos Jankovic

          __________________________________________________________________________________________

          You can get more information about our cookies and privacy policies on the following links:

          Fiware-lab-help mailing list
          Fiware-lab-help@lists.fiware.org
          https://lists.fiware.org/listinfo/fiware-lab-help

          [Created via e-mail received from: Milos Jankovic <jankovicmilos641@gmail.com>]

            Activity

            Ascending order - Click to sort in descending order
            Hide
            Permalink
            aalonsog Alvaro Alonso added a comment -

            Hi, the requests you are trying to perform correspond to Keystone API. Thus, you have yo use Keystone authentication (i.e. including a Keystone token in X-Auth-Token header). Here you will find details regarding how to create a Keystone token: https://developer.openstack.org/api-ref/identity/v3/

            Show
            aalonsog Alvaro Alonso added a comment - Hi, the requests you are trying to perform correspond to Keystone API. Thus, you have yo use Keystone authentication (i.e. including a Keystone token in X-Auth-Token header). Here you will find details regarding how to create a Keystone token: https://developer.openstack.org/api-ref/identity/v3/
            Hide
            Permalink
            fw.ext.user FW External User added a comment -

            Comment by jankovicmilos641@gmail.com :

            Dear support,

            Thank you for your answer. I still cannot perform to get list of
            organization (tenants/projects) that I authorised in my application. If I
            use

            GET users/user_id/projects

            I am getting all organization that I have created,but only some of them I
            authorized in my aplication

            Is there something that I am missing?

            Thank you in advance

            Milos

            On 3 May 2017 16:22, "Help-Desk" <jira-help-desk@jira.fiware.org> wrote:

            >
            >

            Show
            fw.ext.user FW External User added a comment - Comment by jankovicmilos641@gmail.com : Dear support, Thank you for your answer. I still cannot perform to get list of organization (tenants/projects) that I authorised in my application. If I use GET users/user_id/projects I am getting all organization that I have created,but only some of them I authorized in my aplication Is there something that I am missing? Thank you in advance Milos On 3 May 2017 16:22, "Help-Desk" <jira-help-desk@jira.fiware.org> wrote: > >
            Hide
            Permalink
            aalonsog Alvaro Alonso added a comment -

            Dear Milos,

            in the current version of Keyrock, the role assignments endpoint in OS-ROLES extension is restricted to admins because we have not implemented the option of checking policies based on query strings. We are going to add this feature in the roadmap of the component but we cannot give you a tentative date of accomplishment . Of course, you can always contribute a feature to the code

            BR and sorry for the inconvenience.

            Show
            aalonsog Alvaro Alonso added a comment - Dear Milos, in the current version of Keyrock, the role assignments endpoint in OS-ROLES extension is restricted to admins because we have not implemented the option of checking policies based on query strings. We are going to add this feature in the roadmap of the component but we cannot give you a tentative date of accomplishment . Of course, you can always contribute a feature to the code BR and sorry for the inconvenience.

              People

              • Assignee:
                aalonsog Alvaro Alonso
                Reporter:
                fw.ext.user FW External User
              • Votes:
                0 Vote for this issue
                Watchers:
                2 Start watching this issue

                Dates

                • Created:
                  Updated:
                  Resolved: