The code for this blog post isn't in a GitHub repo (when I get a sample using our APIs I'll have some), but here's the gist.
Here is a function I'd use to generate an access token. It does this by making a JWT, and hitting an endpoint to convert it to an access token. Here's the function:
async function getAccessToken(config) {
let scope = `https://ims-na1.adobelogin.com/s/${config.metaScopes}`;
let cred = {
"iss":config.orgId,
"sub":config.technicalAccountId,
"aud":`https://ims-na1.adobelogin.com/c/${config.clientId}`
};
cred[scope] = true;
const token = sign(cred, config.privateKey, {expiresIn: 300, algorithm: 'RS256'});
let body = `client_id=${config.clientId}&client_secret=${config.clientSecret}&jwt_token=${token}`;
let getATReq = await fetch('https://ims-na1.adobelogin.com/ims/exchange/jwt', {
method:'POST',
headers: {
'Content-Type':' application/x-www-form-urlencoded'
},
body: body
});
return await getATReq.json();
}
And here's how I call it. The capitalized variables are my credentials, each named (hopefully) in a way that makes sense:
let config = {
clientId: CLIENT_ID,
clientSecret: CLIENT_SECRET,
technicalAccountId: TECHNICAL_ACCOUNT_ID,
orgId: ORG_ID,
privateKey: KEY,
metaScopes:'ent_ccas_sdk'
}
let { access_token } = await getAccessToken(config);
Once you have the access token, you can then go to town.
In the new system, you will ONLY use a client id and client secret. So for example:
let access_token = await getAccessToken(CLIENT_ID, CLIENT_SECRET);
And here's the updated function:
async function getAccessToken(clientId, clientSecret) {
const params = new URLSearchParams();
params.append('client_secret', clientSecret);
params.append('grant_type', 'client_credentials');
params.append('scope', 'openid,AdobeID,read_organizations');
let resp = await fetch(`https://ims-na1.adobelogin.com/ims/token/v2?client_id=${clientId}`,
{
method: 'POST',
body: params
}
);
let data = await resp.json();
return data.access_token;
}
Hope this helps!
1 Correct answer
18
Replies
AdChoices