OAuth 2.0 Tutorial¶
This tutorial walks new users through configuring OAuth 2.0 on a QIE Web Service Connection. After completing the chapters you should understand the Client Credentials grant, the JSON Web Token format, and the three payload styles QIE supports (URL-encoded, JSON, and JWT-bearer), and you should have working Auth0 connections that demonstrate each style.
The hands-on exercises use Auth0 as the Identity Provider because it offers a free developer account (free for 30 days as of this writing) and works without changes to your network.
Chapters¶
- Before Running the OAuth Tutorial covers the prerequisites: an Auth0 account, a QIE version that supports OAuth, and (for the JWT chapter) a signing certificate.
- OAuth 2.0 Basics covers the Client Credentials grant, the Web Service Connection layout, and the JSON Web Token format.
- Configuring OAuth 2.0 in QIE is the field reference for the OAuth section of a Web Service Connection, and the two supported payload formats.
- URL-Encoded Payload Exercise connects to Auth0 with a URL-encoded Client Credentials payload.
- JSON Payload Exercise connects to Auth0 with a JSON Client Credentials payload.
- JWT Payload Exercise connects to Auth0 with a private-key-signed JWT assertion.
- Test Your OAuth Connection From a Channel builds a minimal channel that calls the Resource Server through the Web Service Connection you just configured, end-to-end.