How do I use external OAuth authorization in a MVC project that is not twitter, facebook, or microsoft?

Question

I need to update my MVC process to allow for external OAuth process, as described in tutorials such as this one. However, every tutorial I find uses facebook/twitter/Microsoft, which is already built in functions. I need to use a different server and pass in a token. And I'm a client, not a server.

My setup is using the standard SPA project, with a login and etc. I will have to have it redirect to a page with the refresh token and store that refresh token for my future requests to an API. I have no problem with this, I simply cannot do the first OAuth call. And it seems, I'm not the only one having this trouble.

For this request to the OAuth 2.0 provider, I will have to add an access token to the request, then the user can login and click allow/deny.

POST {TokenPath} HTTP/1.1
Host: {AuthorizationServer}
Authorization: Basic {ThirdPartyAuthorizationCode}
Content-Type: application/x-www-form-urlencoded

grant_type = authorization_code

Then I will get a response from the POST with access_token and an expiration date.

So, how can do I do that?

Answer 1

You can use third-party OAuth tokens on Apigee. To use tokens from third-party OAuth systems in Apigee Edge, you need to do these things:

Configure the OAuthV2 policy that generates tokens with the < ExternalAuthorization> element set to true. If this element is false or not present, then Edge validates the client_id and client_secret normally against the Apigee Edge authorization store. Set the internal flow variable oauth_external_authorization_status to true. If this value is false (or if the variable is not present), Edge assumes that the third-party authorization failed and returns an error message.

Typically, this variable is set to true or false based on a service callout to a third-party authorization service. You can look at the service callout response and set the variable accordingly. Take a look at the ServiceCallout policy for details. Another technique for setting this variable is to use an AssignMessage policy with the AssignVariable element, like this:

  <AssignMessage name="AssignMessage-SetVariable">
<DisplayName>Assign Message - Set Variable</DisplayName>
<AssignVariable>
    <Name>oauth_external_authorization_status</Name>
    <Value>true</Value>
</AssignVariable>
<IgnoreUnresolvedVariables>true</IgnoreUnresolvedVariables>

Refer the following Link:

Using third-party OAuth tokens