Authentication process

[Naveen27532868xc5j]

Hi team, 
We are trying to use the adobe api for document generation, pdf services and signin. For the authentication purpose in the documentation it is mentioned like we need to upload a public key and certificate to the adobe I/O console. While I wasn't able to find the I/O console and add the integration as mentioned in the docs.

But I tried another method like adding the I/O management or the I/O event service to my project and used the public key pair generated in that process. The API works fine when using that private key to generate the JWT and access token. Is this the current procedure or we need to use the open-ssl and generate a certificate and public key and upload them in the console? If so, please provide us with the details of where to upload the private key in the console. As far as we checked, when we add any API services, we get the service account authentication credentials and we don't see any such thing called the upload public key to the integration. Also we could not find the term integrations as well in the console.

[Raymond Camden]

I never upload a key, but rather use the key created when using the create credentials flow. Have you tried that?

[Naveen27532868xc5j]

Thanks for the response! We are currently using the key that we got when we added the I/O event or I/O management API to my project. That works fine for us. But we need to know whether that is the correct way to get the public key pair for JWT  generation. Since in the documentation there is nothing mentioned like that. It was mentioned only about the  Adobe I/O console and the integration. But we couldn't find anything like that.

As you mentioned, the key we got when creating the credentials flow doesn't seem to work fine. We used the key that we  got when adding the I/O management API service to my project.

[Raymond Camden]

I'm honestly confused by what you mean. 🙂 There is no "I/O event or I/O management" API related to Acrobat Services. In the developer console, you can add Acrobat Services as an API and get credentials that way, and that's the only way I'm aware of. 

[Naveen27532868xc5j]

Please refer the screenshot for what I am refering. This is in the developer console.

[Raymond Camden]

Ah ok, I've not used one credentials for multiple APIs before - I had assumed it was unique. 

[Naveen27532868xc5j]

Please confirm me whether the way we used to get the credentials was right or not?

[Raymond Camden]

I believe so. 

[Qais Maash]

Do you mind if you share how you start to generate the JWT .... I'm having the same PDF service API and can't find an automated way or end point to generate the JWT unless I take the private key and manually do it through the consol which doesn't make sense to do it every 24 hours .... I don't have any hope from Adobe support to respond, as you see their answer "I believe so" ... lol .... not even sure

[Raymond Camden]

What platform? Ie, Node, Python, etc?

[Qais Maash]

We are using Boomi as an integration middleware , so I don't have any technical platform or even technical resources to do coding ..... there's an option in Boomi to write Groovy script though, any Groovy sample and I can replace the values of the payload and private.key content ?

[Raymond Camden]

Ah sorry no. I could show Python or Node. 

[Qais Maash]

Adobe needs to consider that not all clients have technology platform for development.

Thanks anyway and as usual with Adobe we have to seek 3rd party help.

[Raymond Camden]

I'm... confused. This is an API service. Are you complaining that there isn't a way to use it w/o writing code? That seems impossible. We do have REST APIs that our SDKs use. You can use *any* platform you want to hit the APIs. If your issue is generating a JWT, wouldn't that be something to look up in the Groovy docs?

[Qais Maash]

Maybe you can help me other areas Raymond

• I generate jtwt and exchange it for access_token
• Then I upload the template
• After that I generate PDF document using the asset_id to refer to the template, check status and get the download URL

After sometime when access_token and JWT token expired, do you I need to re-upload a new template and get new asset_id to start generating new PDFs ?

Also, I noticed in postman collection that there's get token for each operation type (generate, protect, ....etc.) does that mean I have to generate a new access_token for each type of operation ?

[Raymond Camden]

You have a few unrelated things going on here:

If you generate a new access token in your code, then it should work every time. 

In terms of "re-uploading template" - we only store assets for 24 hours. So if you are doing something where you re-use an asset, you can re-use it if it's in that timeframe. 

[Qais Maash]

ok, my process runs weekly to generate multiple PDF files, so I guess I need to upload the template every week.

[Raymond Camden]

Yep.

[Qais Maash]

Just to make it clear, once I passed 24 hours, I have to generate new JWT and then exchange it for access_token , correct ?

[Raymond Camden]

I generally make a new access token every time. We've got a npm package that makes it easy, but it's possible via HTTP calls as well. I can dig up that example if you need to see it - it would be Node, but you could "translate" the URL calls to Groovy.

[Qais Maash]

Thanks Raymond - I know Adobe control the time of expiring the access token (which is 24 hrs) , but if I generate JWT I have a control on the expiry where I can set it for 2 weeks for example, does Adobe force the JWT token to expire too in 24 hrs regardless of what I put ?

[Raymond Camden]

I honestly don't know. In all my code samples, I generate the JWT and exchange it for an access token every time and it just plain works for me. 

[Qais Maash]

Hi Raymond - Can you please help me on this , I'm ready now to go from trial to live and when I tried to signup https://aws.amazon.com/marketplace/pp/prodview-wzykfz2grnbdk there's a message that says "This version of Adobe PDF Services API (U.S.) is not available to new customers." , what should I do to signup ? am I on the wrong URL ?

[Raymond Camden]

We no longer support the AWS Marketplace - I posted about this about 2 seconds ago: https://community.adobe.com/t5/acrobat-services-api-discussions/adobe-pdf-services-api-delisting-fro...

To be clear, you can 100% use our services on Amazon - you just need to sign up for credentials here, and to go commercial, contact sales: https://developer.adobe.com/document-services/pricing/contact/sales/

[Qais Maash]

wow .... just on the day we finished our testing and ready to go live , I contacted sales and not sure how long it will take them to get back to me 😞

Adobe should have the new option available to buy/subscribe once the other one get sunset