Search code examples
ajaxapiibm-mobilefirstpostmanmobilefirst-server

MFP 8.0 API works in POSTMAN but not from AJAX

I am able to make a successful POSTMAN call to: /mfp/api/az/v1/token and /mfpadmin/management-apis/2.0/runtimes/mfp/applications

I am taking the bearer token i receive from /mfp/api/az/v1/token and add it to the Authorization header for /mfp/applications.

I receive a 200 response from both and get the expected information from each API.

I then choose to copy the ajax code from POSTMAN for each of these working API Calls: 

  var getBasic = {
    "async": true,
    "crossDomain": true,
    "url": "https://..../mfp/api/az/v1/token",
    "method": "POST",
    "headers": {
      "authorization": "Basic YXBpYzptZnBhcGlj",
      "grant_type": "client_credentials",
      "cache-control": "no-cache",
      "postman-token": "05a672e5-6141-fd6f-82e2-b282d68dce35",
      "content-type": "application/x-www-form-urlencoded"
    },
    "data": {
      "grant_type": "client_credentials",
      "scope": "settings.read"
    }
  }

  $.ajax(getBasic).done(function (response) {
    console.log(response);
    var accessToken = response.access_token;
    console.log(accessToken);
    var settings = {
      "async": true,
      "crossDomain": true,
      "url": "https://....:8445/mfpadmin/management-apis/2.0/runtimes/mfp/applications",
      "method": "GET",
      "headers": {
        "authorization": "Bearer " + accessToken,
        "cache-control": "no-cache"
        }
      }
    console.log(settings);
    $.ajax(settings).done(function (response) {
      console.log("response: " + response.totalListSize);
    });

  });

However, when i run this in my WebUI I get a 200 response from the /token but i get a 401(Unauthorized) from my /mfp/applications

Why does this work in postman, but not from the Web UI (Chrome)?

Solution

  • The mfpadmin service and its endpoint that you're using (applications) does not require an access token in the way that you have tried to obtain it. It requires the user name and password for the console. As such when you're using the Bearer access-token, it fails with 401 unauthorized because that is not what the server is expecting in order to allow access to the applications endpoint.

    I have done the following:

    1. Installed the express and request node packages to create a proxy of sorts. This is required as you can't simply make an AJAX request from the browser to the server (you will get errors from the browser related to cross origin requests):

      npm init
npm install --save express
npm install --save request

      Created a proxy.js (note that this code is specific to mfpadmin):

      var express = require('express');
var http = require('http');
var request = require('request');

var app = express();
var server = http.createServer(app);
var mfpServer = "http://localhost:9080";
var port = 9081;

server.listen(port);
app.use('/', express.static(__dirname + '/'));
console.log('::: server.js ::: Listening on port ' + port);

// Reverse proxy, pipes the requests to/from MobileFirst Server
app.use('/mfpadmin/*', function(req, res) {
     var url = mfpServer + req.originalUrl;
     console.log('::: server.js ::: Passing request to URL: ' + url);
     req.pipe(request[req.method.toLowerCase()](url)).pipe(res);
});

    2. In an HTML file reference an implementation .js file and jQuery:

      <html>
    <head>
        <script src="/jquery-3.1.1.min.js"></script>
        <script src="/main.js"></script>
    </head>

    <body>

    </body>
</html>

    3. In main.js file:

      $.ajax({
   "crossDomain": true,
   "url": "http://localhost:9081/mfpadmin/management-apis/2.0/runtimes/mfp/applications",
   "method": "GET",
   "headers": {
       "authorization": "Basic YWRtaW46YWRtaW4=",
       "Access-Control-Allow-Origin": "*",
       "cache-control": "no-cache" 
   }      
}).done(function(response) {
    console.log(response);
});

      Basic YWRtaW46YWRtaW4= is the representation of Basic Auth with username admin and password admin.

    As a response I received the following JSON.
    The items array contains the applications that are currently registered in the MobileFirst Server.

    enter image description here