B2C Service - How to use cURL to access the Connect REST API with IDCS OAuth Token

Hi,

In this post, I will discuss how to use cURL to validate IDCS access token. It will be useful if you want to validate the token before you call API in your custom logic (e.g. Access B2C Service API in custom PHP, Access B2C Service API from CX Sales Groovy).

Here are the steps -

1. Base64 Encode the Client ID and Client Secret

Once you create confidential app on IDCS, you can get its Client ID and Secret then you can create the string by concatenating the client ID and client secret with a colon between them like this (clientid:clientsecret)

To generate base64 encoded value, you can use tools like certutil on Windows or website (https://www.base64encode.org/).

The following is an example of encoding from website https://www.base64encode.org/

2. Obtain an Access Token

The next step in this process is to request the access token.

• Launch a command prompt.
• Enter the cURL command below, replacing the text in brackets ( < > ) with the appropriate values.

curl -i

-H "Authorization: Basic <base64encoded clientid:secret>"

-H "Content-Type: application/x-www-form-urlencoded;charset=UTF-8"

--request POST https://tenant-base-url/oauth2/v1/token

-d "grant_type=client_credentials&scope=urn:opc:idm:__myscopes__"

• Copy the access_token value from the response. Make sure to copy only the actual token, which is the access_token value between the quotation marks.

C:\curl\curl-7.69.1-win64-mingw\bin>curl -H "Authorization: Basic ZDczZDE1ODFkMTQwNDUyZjhlNzlmMDAzNjcyMDk3MTE6NDFiMTU5YTYtZTQxMy00MjJhLWE4ZDQtODY4NjFlNjczOGQ2" -H "Content-Type: application/x-www-form-urlencoded;charset=UTF-8" --request POST https://tenant-base-url/oauth2/v1/token -d "grant_type=client_credentials&scope=urn:opc:idm:__myscopes__"

{"access_token":"eyJ4NXQjUzI1NiI6Ii1ob2VIaG9UYmxBYVJmMnJhb21rS0xhelh0cWh0TDBYZUhmTW1jeTUxSDAiLCJ4NXQiOiJqT1FXVzFpRWxrMERsNHdSRWtNWnpFckFoNjgiLCJraWQiOiJTSUdOSU5HX0tFWSIsImFsZyI6IlJTMjU2In0.eyJzdWIiOiJkNzNkMTU4MWQxNDA0NTJmOGU3OWYwMDM2NzIwOTcxMSIsInVzZXIudGVuYW50Lm5hbWUiOiJpZGNzLTc1MWRlMjkzODRiMTRmZThiMjcxZjFmYjcyYzQxYWVkIiwic3ViX21hcHBpbmdhdHRyIjoidXNlck5hbWUiLCJwcmltVGVuYW50Ijp0cnVlLCJpc3MiOiJodHRwczpcL1wvaWRlbnRpdHkub3JhY2xlY2xvdWQuY29tXC8iLCJ0b2tfdHlwZSI6IkFUIiwiY2xpZW50X2lkIjoiZDczZDE1ODFkMTQwNDUyZjhlNzlmMDAzNjcyMDk3MTEiLCJjYV9ndWlkIjoiY2FjY3QtODkwZjQ2MWMyOGMyNDAyOWE3YjY5NmUzZGNjNDU3ZDEiLCJhdWQiOlsidXJuOm9wYzpsYmFhczpsb2dpY2FsZ3VpZD1pZGNzLTc1MWRlMjkzODRiMTRmZThiMjcxZjFmYjcyYzQxYWVkIiwiaHR0cHM6XC9cL2lkY3MtNzUxZGUyOTM4NGIxNGZlOGIyNzFmMWZiNzJjNDFhZWQuaWRlbnRpdHkub3JhY2xlY2xvdWQuY29tIl0sInN1Yl90eXBlIjoiY2xpZW50IiwiY2xpZW50QXBwUm9sZXMiOlsiQXV0aGVudGljYXRlZCBDbGllbnQiLCJNZSJdLCJzY29wZSI6InVybjpvcGM6aWRtOnQuc2VjdXJpdHkuY2xpZW50IHVybjpvcGM6aWRtOnQuYXBwc2VydmljZXMgdXJuOm9wYzppZG06dC5uYW1lZGFwcGFkbWluIHVybjpvcGM6aWRtOnQub2F1dGhjb25zZW50cyB1cm46b3BjOmlkbTp0LnVzZXIubWUiLCJjbGllbnRfdGVuYW50bmFtZSI6ImlkY3MtNzUxZGUyOTM4NGIxNGZlOGIyNzFmMWZiNzJjNDFhZWQiLCJleHAiOjE1OTg0MjEzNjUsImlhdCI6MTU5ODQxNzc2NSwidGVuYW50X2lzcyI6Imh0dHBzOlwvXC9pZGNzLTc1MWRlMjkzODRiMTRmZThiMjcxZjFmYjcyYzQxYWVkLmlkZW50aXR5Lm9yYWNsZWNsb3VkLmNvbSIsImNsaWVudF9ndWlkIjoiZjBlYjFjYWZiMjA5NGUyNzhjY2M1ZDAyYjgwNzFmMzQiLCJjbGllbnRfbmFtZSI6Ik9TdkNfVFNUMiIsInRlbmFudCI6ImlkY3MtNzUxZGUyOTM4NGIxNGZlOGIyNzFmMWZiNzJjNDFhZWQiLCJqdGkiOiI5MmE3NGVhMC01NjVhLTQ0MDgtYmMwZS03ZmVlM2Q3MDAyY2QifQ.FQj5kvieS6FLIfrE2zPa2fTQ5YgmJAA0SRH786s1bget8NG8rK_51c9lFvlhOra8-Yd_kQTECvaG7t9lOQIXYCG0zhVU7GtZFOooqowZcBSewU_UKwR2iJv5zlDw8FIMbIVTottNKiwO9lAhLkgTPiNaOORB8_vq6DfiJQNfNQ2h8GPQMpxOAjNiyQHqgFsUQpLTSLoBg_kbCfHcLeKHlOz3uO3eiX6a1Kzct3GRkuB1nAiJW61e2VFZwycFcMZOMBpxBRWjIlRA9wQZ8su9_4ylEpkQL97YRqMO3G6NqeMhh9mTUIfVtilxQJD-7ja8_ZnNBTqr9gJsPF-jcmiqoQ","token_type":"Bearer","expires_in":3600}

3. Make a REST Request to the B2C Service environment

After you obtain the OAuth access token, you can use the token in a cURL command to send a REST request to the Oracle B2C Service REST API. The following command returns metadata in your Oracle B2C Service instance.

curl -X GET -H "Content-Type:application/scim+json" -H "OSvC-CREST-Application-Context:123" -H "Authorization: Bearer eyJ4NXQjUzI1NiI6Ii1ob2VIaG9UYmxBYVJmMnJhb21rS0xhelh0cWh0TDBYZUhmTW1jeTUxSDAiLCJ4NXQiOiJqT1FXVzFpRWxrMERsNHdSRWtNWnpFckFoNjgiLCJraWQiOiJTSUdOSU5HX0tFWSIsImFsZyI6IlJTMjU2In0.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.FQj5kvieS6FLIfrE2zPa2fTQ5YgmJAA0SRH786s1bget8NG8rK_51c9lFvlhOra8-Yd_kQTECvaG7t9lOQIXYCG0zhVU7GtZFOooqowZcBSewU_UKwR2iJv5zlDw8FIMbIVTottNKiwO9lAhLkgTPiNaOORB8_vq6DfiJQNfNQ2h8GPQMpxOAjNiyQHqgFsUQpLTSLoBg_kbCfHcLeKHlOz3uO3eiX6a1Kzct3GRkuB1nAiJW61e2VFZwycFcMZOMBpxBRWjIlRA9wQZ8su9_4ylEpkQL97YRqMO3G6NqeMhh9mTUIfVtilxQJD-7ja8_ZnNBTqr9gJsPF-jcmiqoQ" https://osvc.custhelp.com/services/rest/connect/v1.4/metadata-catalog

That's it!

Note - You can also refer to Oracle Doc for cross-reference -

https://docs.oracle.com/en/cloud/paas/identity-cloud/rest-api/OATOAuthClientWebApp.html

Let me know if any feedback.

Thanks,
Adam Liu