Testing an OAuth Protected API
When an OAuth protected API is published from API Gateway to API Portal you require an OAuth2 access token to test the API. The Authorization server can be configured to use either HTTP or HTTPS connection to authorize requests. For information on enabling HTTPS mode for Authorization server in API Gateway see, API Gateway Administrator's Guide and webMethods Integration Server Administrator’s Guide.
To test an OAuth2 protected API
1. Switch to the API Gallery page.
Alternatively, go to the Home page and type the beginning of the API name in the search box.
2. Click View details for an API.
The API Details page opens.
3. Click Get access token if you are accessing the API for the first time, else proceed to step 6.
4. In the Request API access token dialog box, provide the Application name and Application description.
The application is created and listed in the Applications page.
5. Click Request token.
6. In the API details page, click Try API.
The application is listed in the Try API page.
7. Click Get new token.
This option is available if the API is OAuth protected and you have requested an application to access the API.
8. In the Get OAuth token dialog box provide the following information:
Token name: Type a name for the token.
Grant type: Select the grant type to be used to authenticate the API. Available values are
Authorization code,
Implicit,
Client Credentials.
The Authorization URL, Access token URL, Client Id, and Client secret are pre-populated depending on what grant type is selected.
9. Click Get token.
10. In the API Gateway Resource access approval page, click Approve.
This page lists all the APIs that are added as part of the application.
A token is generated and is listed under the available token list. An Authorization header is added along with the access token value.
11. Select the access token and click Test.
The response is displayed.