OAUTH/OIDC and REST API

[lombao]

I have a question, again , I am not 100% so I well might be wrong

I managed to use the OAUTH so using the OpenIDM UI I can authenticate with an external IdP. It works nicely , and with a mininal auth js script can even retrieve the authroization info to map it into openidm roles. nice

However I am not able to make it work with the REST API. The bearer tokens provided by a session of the external IdP are
simply ignored by OpenIDM, which makes me think that perhaps the REST API does not use the OAUTH2 authentication
module and only uses the internal authentication mechanisms. Am I right in this. ? Has anyone managed to use OAUTH2/OIDC via REST API ? so OpenIDM uses the bearer token and validates it against the external IdP server.

[maximthomas]

Hi @lombao,
Could you provide more details? Such as request and responses examples, expected results, etc...
Thanks!

[lombao]

If in the authentication.json , I set the OAUTH authenticator ...
{ "enabled" : true, "properties" : { "resolvers" : [ { "name" : "OAUTH", "client_id" : "openidm", "scope" : [ "openid" ], ... ..

this will work with the OpenIDMUI , I manage to have openidm talking with a Keycloak, no prob, I have the usual OIDC/OAUTH ".0 authentication mechanism and a session is stablished

Now, If I use the REST API, I assume I must to pass a bearer token which I already got from my IdP , fine, however it seems that via REST AP ( curl ) the credential validation will always happen "locally" , again.. that's what I am seeing, maybe there is an option I am not aware of. But, the poinmt is to make REST API honouring the OAUTH auth mechanism.

However, when I want to use the REST API

[maximthomas]

Please provide a curl request and repsonse example and describe an expected result.