FetchOAuthAuthenticationToken - Identity as a Service - Alibaba Cloud Documentation Center

Mengambil token otentikasi OAuth yang valid.

Deskripsi operasi

This API performs identity authentication and authorization using an access token issued by IDaaS.

Ensure that the access token has permission to obtain authentication tokens from the built-in Privileged Access Management (PAM) application in IDaaS.

Catatan

The corresponding scope is urn:cloud:idaas:pam|authentication_token:obtain.

Coba sekarang

Coba API ini di OpenAPI Explorer tanpa perlu penandatanganan manual. Panggilan yang berhasil akan secara otomatis menghasilkan contoh kode SDK sesuai dengan parameter Anda. Unduh kode tersebut dengan kredensial bawaan yang aman untuk penggunaan lokal.

Test

RAM authorization

Tidak ada otorisasi untuk operasi ini. Jika Anda mengalami masalah saat menjalankan operasi ini, hubungi dukungan teknis.

Sintaks permintaan

POST /v2/{instanceId}/authenticationTokens/_/actions/fetchOAuthAccessToken HTTP/1.1

Path Parameters

Parameter	Type	Required	Description	Example
instanceId	string	Yes	ID instans.	idaas_ue2jvisn35ea5lmthk267xxxxx

Parameter permintaan

Parameter	Type	Required	Description	Example
Authorization	string	Yes	Informasi otentikasi. Formatnya adalah `Bearer ${access_token}`. Catatan Masukkan token akses yang diterbitkan oleh IDaaS.	Bearer xxxxxx
body	object	No	Badan permintaan.
credentialProviderIdentifier	string	Yes	The identifier of the credential provider.	test_example_identifier
scope	string	No	The scope for the OAuth protocol. Catatan If you do not specify this parameter, the scope of the issued OAuth access token is determined by the scope configuration of the credential provider. Penting Separate multiple scope values with spaces.	example:test_01 example:test_02

Elemen respons

Element	Type	Description	Example
	object	The details of the OAuth authentication token.
instanceId	string	The instance ID.	idaas_ue2jvisn35ea5lmthk267xxxxx
authenticationTokenId	string	The authentication token ID.	atntkn_01kqflm0sxxx8nmdc1cb5dskxxxxx
credentialProviderId	string	The credential provider ID.	atp_01kr2cmj5gxxx4fvmls2e93dxxxxx
createTime	integer	The time when the authentication token was created. This is a UNIX timestamp in milliseconds.	1649830225000
updateTime	integer	The time when the authentication token was last updated. This is a UNIX timestamp in milliseconds.	1649830225000
authenticationTokenType	string	The type of the authentication token. Catatan The value is fixed to `oauth_access_token`, which indicates an OAuth access token.	oauth_access_token
revoked	boolean	Indicates whether the authentication token is revoked.	false
creatorType	string	The type of the creator of the authentication token. Valid value: `application`: An application.	application
creatorId	string	The ID of the creator of the authentication token.	app_ngtkgrrxxxxktg5eao6z4xxxxx
consumerType	string	The type of the consumer of the authentication token. Valid values: `application`: An application. `custom`: A custom type.	application
consumerId	string	The ID of the consumer of the authentication token.	app_ngtkgrrxxxxktg5eao6z4xxxxx
expirationTime	integer	The time when the authentication token expires. This is a UNIX timestamp in milliseconds.	1772693568000
oauthAccessTokenContent	object	The content of the OAuth access token.
accessTokenValue	string	The `access_token` field in the response from the token endpoint of the OAuth protocol.	DgEBAGP2xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
tokenType	string	The `token_type` field in the response from the token endpoint of the OAuth protocol.	Bearer
scope	string	The `scope` field in the response from the token endpoint of the OAuth protocol.	example:test_01 example:test_02

Contoh

Respons sukses

JSONformat

{
  "instanceId": "idaas_ue2jvisn35ea5lmthk267xxxxx",
  "authenticationTokenId": "atntkn_01kqflm0sxxx8nmdc1cb5dskxxxxx",
  "credentialProviderId": "atp_01kr2cmj5gxxx4fvmls2e93dxxxxx",
  "createTime": 1649830225000,
  "updateTime": 1649830225000,
  "authenticationTokenType": "oauth_access_token",
  "revoked": false,
  "creatorType": "application",
  "creatorId": "app_ngtkgrrxxxxktg5eao6z4xxxxx",
  "consumerType": "application",
  "consumerId": "app_ngtkgrrxxxxktg5eao6z4xxxxx",
  "expirationTime": 1772693568000,
  "oauthAccessTokenContent": {
    "accessTokenValue": "DgEBAGP2xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx",
    "tokenType": "Bearer",
    "scope": "example:test_01 example:test_02"
  }
}

Kode kesalahan

Lihat Error Codes untuk daftar lengkap.

Catatan rilis

Lihat Release Notes untuk daftar lengkap.