Скачать или смотреть Demo | Hello API Proxy with AWS Cognito OAuth2 Security

Learn more about Amplify Fusion: https://www.axway.com/en/products/amp...

Secure your API proxy with OAuth 2.0 authentication by integrating Amazon Cognito with Amplify Fusion. In this video, you'll learn how to:
🛡️ Replace basic API key with sophisticated token-based security
🔐 Configure OAuth 2.0 policies and rules in Amplify Fusion
🆔 Set up Amazon Cognito user pools for machine-to-machine authentication
✅ Test OAuth authentication

This video is part of a series showcasing how easy it is to build integrations with minimal setup inside Axway Amplify Fusion. Watch the full series here    • Axway Amplify Fusion | Demo Series  

Full transcript:
Hi. In this video, we're going to use Amplify Fusion and Amazon Cognito to add OAuth 2.0 client credentials authentication to an API that we're proxying in Amplify Fusion. So continuing from the last video, where we use the pet store API, we called a CatStore and we proxy that in Fusion. And then we added API key authentication with a key name called x-api-key. And if I come into Postman, you can see that that works. And if I turn off authentication, you see that it doesn't. So we are securing our API currently with API key. So what we want to do is we want to use the Amazon Cognito service to add OAuth, OAuth 2.0 security to our API. So, first, in Amazon Cognito, we need to create a user pool. And I will just accept the default name. And this is a machine-to-machine application. And I'm going to create the user directory. I'm going to grab this... oh no, not yet. What we're going to do now is we are going to go to Overview. And I do need this token signing key URL. And I'm going to put this in my notepad. And the next thing we need to do is we need to create an app client. So here I have an app client. And if I open that up, I can see my Client ID. And I can see my secret, I can just copy that. And the other thing I have here is a curl command to get a token, yeah, to get a token. So let me paste that up here. And you see that I need to replace my secret in there. And also it's important to note that this is my token URL. I'll need that later. And I will paste the secret. And now let's call this. So let me call, and I have a token. And the reason I need this token is that I'd like to find out what the Client ID claim and scope claim are, because I'm going to need that in Amplify Fusion. All right, so I take that token and I'll go over to JWT.io and let's paste that in. And I can see here that the claim table — well, there's the JSON — but scope and client_id are what I need. So I'll copy that. And client_id. And I think I have everything I need now. So let's come back over here to Amplify Fusion. Let's disable this. Now, in order to add OAuth authentication, I need a governance rule. And my governance rule will require an identity provider. So let's start off with identity provider. And I come down here to Manager. Come to the bottom identity provider. And let's add an identity provider. So this is Cognito. And you see, I need that JWKS URL, that's right here. And I need the client ID claim. So that's client_id. And the scope claim was scope. And then I need a token URL. So we saw the token URL was provided in Cognito and the UI. And this is for client credentials, okay. I lost my URL. There's the URL. And let's add that, and we can now save. So now I have an identity provider defined, I can come back over here to my API project. And under security, I could select OAuth 2.0, and for governance rule, we can create a governance rule. So I'm going to call this Cognito OAuth. And for the identity provider, we select the Cognito identity provider we just created. And then we click Create. And then we click Save. Okay. So at this point, I can enable my API. And I can come over here to Postman, I can select OAuth 2.0. Let me scroll down here to the bottom. And I can start entering my information. So I need my access token URL. That's right here. And then I need a client ID and secret. And come down here and get a new access token that worked. And I can use that token. And then we can call our API, and it doesn't work. Well, we know why it doesn't work. If you recall from the last video on API key, I also need to add the credentials to an application. So, if you recall, I had an application before it was called TestApp. And if you come in here, TestApp does have my CatStore from the Getting Started project and the data plane. And it actually has an API key, but I'm not using API key authentication anymore. So we need to add an OAuth 2.0 credential and I'll call this Cred1. Whoops. Cred1. I provision it manually. And I need that client ID. And I enter the Client ID, click Okay and Save. Then it should work. So, in this video, we saw how to use Amplify Fusion and Amazon Cognito to use, to add OAuth 2.0 client credentials authentication to an API that we're proxying in Amplify Fusion. Thank you.

#Axway #Fusion #AWS #OAuth