Stuck on an issue?

Lightrun Answers was designed to reduce the constant googling that comes with debugging 3rd party libraries. It collects links to all the places you might be looking at while hunting down a tough bug.

And, if you’re still stuck at the end, we’re happy to hop on a call to see how we can help out.

Suppor for client build with "client-secret"

See original GitHub issue

After reading your document, I can’t understand how to build a client with oauth2, It confuses me that “pathToYourPrivateKeyPemFile”, becaust in my YMAL, I use like this

okta:
  oauth2:
    issuer: https://dev-524104.okta.com/oauth2/default
    client-id: xxxxxxxxxxxxx
    client-secret: xxxxxxxxxxxxxxxxxxxx
    redirect-uri: /authorization-code/callback

Why not client build with client-secret but a PemFile? And you don’t tell my how to get and set the PemFile

Your Document：

Client client = Clients.builder()
    .setOrgUrl("{yourOktaDomain}")
    .setAuthorizationMode(AuthorizationMode.PRIVATE_KEY)
    .setClientId("{clientId}")
    .setScopes(new HashSet<>(Arrays.asList("okta.users.read", "okta.apps.read")))
    .setPrivateKey("{pathToYourPrivateKeyPemFile}")
    .build();

Issue Analytics

State:
Created 3 years ago
Comments:6 (4 by maintainers)

Top GitHub Comments

1reaction

bdemerscommented, Jul 6, 2020

Hi @napayaofenkai! Thanks for reaching out!

It looks like you are also using our Spring Boot integration? If that is the case reusing the user’s existing token might be your best bet: #339 and my comment in: https://github.com/okta/okta-sdk-java/pull/339#issuecomment-654277671

This depends on the type of client you are building and if the requests made to Okta are on-behalf-of a user (for example you need to get the list of applications that the current user has access to). Otherwise, if you don’t need to scope the request to the current user, then the SDK might have a different client-id and secret from your Spring Boot application.

TL;DR - We would love to hear more about your use-case, please add a comment to this thread!

0reactions

arvindkrishnakumar-oktacommented, Oct 5, 2020

Closing this due to inactivity, feel free to reopen if needed.