search

International-Data-Spaces-Association / omejdn-daps

Open Source implementation of the Dynamic Attribute Provisioning Service based on http://github.com/Fraunhofer-AISEC/omejdn-server
Apache License 2.0
7 stars 10 forks source link

Problem generatin DAT #15

Closed aetxeberriasqs closed 2 years ago

aetxeberriasqs commented 2 years ago

The Problem

There is a problem generating the DAT. I have followed the steps to the point of retrieving the DAT with the curl command, yet the following line appears: image Also, I have chequed and the client.yml file have been altered, and now the line 18 where the import_certfile: keys/DAPS.cert should appear has vanished from the clients.yml in the omejdn-server/config folder.

I do not understand why the line has dissapeared.

I have followed the steps until docker build and docker run, and launched the create test token to retrieve a token:

image

And used that token to try recieve the DAT

My Setup

I have followed the setup until the DAT step

Please describe your setup (including your operating system / Distribution, Ruby Version, etc.)

What I have done up front

_

What I expected to happen

I hoped to retrieve a DAT without any error

What actually happened

This is the place for any error messages, with an explaination of where they appeared

The quest of trying to solve it

What were the results of searching for the error on the internet?

Please note down any search terms and what you learned already

What is your best guess as to what might have happened?

Please note down any suspicions

bellebaum commented 2 years ago

Apparently you have entered daps.key as the key to use. That is Omejdn's signing key. You have to use the one generated for the connector.

bellebaum commented 2 years ago

And the line disappearing from the configuration is normal and nothing to worry about :)

aetxeberriasqs commented 2 years ago

Hi,

As you say, i was mistaking the connectors key, as I have named one daps.key and the other DAPS.key. Now that the token is correctly generated, the following error appears:

image

bellebaum commented 2 years ago

A Scope needs to be requested as idsc:IDS_CONNECTOR_ATTRIBUTES_ALL

aetxeberriasqs commented 2 years ago

Hi,

I do not know what you mean by scope. I have the following files configuration: This is the scope mapping.yml
image And the scope_description.yml image

I have used the scripts/register_connector.sh to generate the following clients.yml: image

And used to the following command of the creation test token image

image

When doing so, I have encountered the following error: image

So following the issue in https://github.com/International-Data-Spaces-Association/omejdn-daps/issues/14 I have run the test.sh and recieved the following: image image

bellebaum commented 2 years ago

Your request (the command involving curl) says scope=ids_connector. Please change it to scope=idsc:IDS_CONNECTOR_ATTRIBUTES_ALL.

aetxeberriasqs commented 2 years ago

Hi,

After changing the scope=idsc:IDS_CONNECTOR_ATTRIBUTES_ALL it appears the following error. I have copied the client from the clients.yml file so I do not know why it fails.

image

bellebaum commented 2 years ago

Only one scope=

aetxeberriasqs commented 2 years ago

True, I have duplicated it when copying the scope.

I have tried to launch it again and this is the result: image

bellebaum commented 2 years ago

Please paste the commands here instead of taking screenshots. This way I can analyze them further.

Your token is not recognized by Omejdn. What do the logs say?

aetxeberriasqs commented 2 years ago

Hi, I paste you here the logs and commands used:

sqs@Virtual-Ubuntu-20:~/DAPS_DOCKERS_ALEX/omejdn-daps/omejdn-server/scripts$ ./create_test_token.rb 16:27:C5:C4:83:59:3F:4D:D5:C0:83:5E:4F:66:C6:F7:DA:D5:0F:88:keyid:16:27:C5:C4:83:59:3F:4D:D5:C0:83:5E:4F:66:C6:F7:DA:D5:0F:88 DAPS.key idsc:IDS_CONNECTOR_ATTRIBUTES_ALL eyJhbGciOiJSUzI1NiJ9.eyJpc3MiOiIxNjoyNzpDNTpDNDo4Mzo1OTozRjo0RDpENTpDMDo4Mzo1RTo0Rjo2NjpDNjpGNzpEQTpENTowRjo4ODprZXlpZDoxNjoyNzpDNTpDNDo4Mzo1OTozRjo0RDpENTpDMDo4Mzo1RTo0Rjo2NjpDNjpGNzpEQTpENTowRjo4OCIsInN1YiI6IjE2OjI3OkM1OkM0OjgzOjU5OjNGOjREOkQ1OkMwOjgzOjVFOjRGOjY2OkM2OkY3OkRBOkQ1OjBGOjg4OmtleWlkOjE2OjI3OkM1OkM0OjgzOjU5OjNGOjREOkQ1OkMwOjgzOjVFOjRGOjY2OkM2OkY3OkRBOkQ1OjBGOjg4IiwiZXhwIjoxNjQwMTY3MTMxLCJuYmYiOjE2NDAxNjM1MzEsImlhdCI6MTY0MDE2MzUzMSwiYXVkIjoiaWRzYzpJRFNfQ09OTkVDVE9SX0FUVFJJQlVURVNfQUxMIn0.infVYMX17Ttb-uLFfNMEMh-9O2czw69Dfb-YEf-ujwTnhu4OzhQZ7SbCYEyW63_HRv5-fPVXOT3AS7qf_AA6kGb4QR7PP3EAPEKmle_AUEWERUVPQR08CDxNSF-d3ZEHXvbzRJEBLSkvmtlwK4uiuztu_GpZVZ3a7gSmqYZZQnT4ZTpHia-dcPGaJkYSmt5q-M79OYUv0sz_WWiRE1p3z00rAhgO9hXbAfgtz7ADgeIFn-DotCk2ejrIP2h2tw_O5vlIdppMQ0OfCKlw4yY01dd5QiTSxQJIQcd-26--p4ZNLPuhj-wAaifHjnhDjtYzPtcnvFgjj-zJ4WmUJwhhRw

This is the curl I am using:

curl localhost:4567/token --data "grant_type=client_credentials&client_assertion_type=urn:ietf:params:oauth:client-assertion-type:jwt-bearer&client_assertion={token_here}&scope=idsc:IDS_CONNECTOR_ATTRIBUTES_ALL security_level"

And this is the curl command logs with the token inserted:

sqs@Virtual-Ubuntu-20:~/DAPS_DOCKERS_ALEX/omejdn-daps/omejdn-server/scripts$ curl localhost:4567/token --data "grant_type=client_credentials&client_assertion_type=urn:ietf:params:oauth:client-assertion-type:jwt-bearer&client_assertion=eyJhbGciOiJSUzI1NiJ9.eyJpc3MiOiIxNjoyNzpDNTpDNDo4Mzo1OTozRjo0RDpENTpDMDo4Mzo1RTo0Rjo2NjpDNjpGNzpEQTpENTowRjo4ODprZXlpZDoxNjoyNzpDNTpDNDo4Mzo1OTozRjo0RDpENTpDMDo4Mzo1RTo0Rjo2NjpDNjpGNzpEQTpENTowRjo4OCIsInN1YiI6IjE2OjI3OkM1OkM0OjgzOjU5OjNGOjREOkQ1OkMwOjgzOjVFOjRGOjY2OkM2OkY3OkRBOkQ1OjBGOjg4OmtleWlkOjE2OjI3OkM1OkM0OjgzOjU5OjNGOjREOkQ1OkMwOjgzOjVFOjRGOjY2OkM2OkY3OkRBOkQ1OjBGOjg4IiwiZXhwIjoxNjQwMTY3MTMxLCJuYmYiOjE2NDAxNjM1MzEsImlhdCI6MTY0MDE2MzUzMSwiYXVkIjoiaWRzYzpJRFNfQ09OTkVDVE9SX0FUVFJJQlVURVNfQUxMIn0.infVYMX17Ttb-uLFfNMEMh-9O2czw69Dfb-YEf-ujwTnhu4OzhQZ7SbCYEyW63_HRv5-fPVXOT3AS7qf_AA6kGb4QR7PP3EAPEKmle_AUEWERUVPQR08CDxNSF-d3ZEHXvbzRJEBLSkvmtlwK4uiuztu_GpZVZ3a7gSmqYZZQnT4ZTpHia-dcPGaJkYSmt5q-M79OYUv0sz_WWiRE1p3z00rAhgO9hXbAfgtz7ADgeIFn-DotCk2ejrIP2h2tw_O5vlIdppMQ0OfCKlw4yY01dd5QiTSxQJIQcd-26--p4ZNLPuhj-wAaifHjnhDjtYzPtcnvFgjj-zJ4WmUJwhhRw&scope=idsc:IDS_CONNECTOR_ATTRIBUTES_ALL security_level" {"error":"invalid_client","error_description":"Client unknown"}

And this is the clients.yml file:

  • client_id: 16:27:C5:C4:83:59:3F:4D:D5:C0:83:5E:4F:66:C6:F7:DA:D5:0F:88:keyid:16:27:C5:C4:83:59:3F:4D:D5:C0:83:5E:4F:66:C6:F7:DA:D5:0F:88 name: DAPS redirect_uri: allowed_scopes:
  • idsc:IDS_CONNECTOR_ATTRIBUTES_ALL attributes:
  • key: securityProfile value: idsc:BASE_SECURITY_PROFILE
  • key: referringConnector value: http://DAPS.demo
  • key: "@type" value: ids:DatPayload
  • key: "@context" value: https://w3id.org/idsa/contexts/context.jsonld
  • key: transportCertsSha256 value: c149a6c1a55bd2c0c02db6b5e249a20dbe3427c70026dc65526d1d1730ecd8b0
bellebaum commented 2 years ago

The request token seems fine. What are the contents of the omejdn-server/keys folder? And what does omejdn print when trying to validate the token? Please send me the logs

aetxeberriasqs commented 2 years ago

Hi,

Here is the contents of the omejdn-server/key folder: image

What do you mean when omejdn print when trying to validate the token? is it when trying to get the DAT with the curl command? I do not understand what you want me to send

bellebaum commented 2 years ago

In some form or another, you must be running omejdn via ruby omejdn.rb, right? Take a look at that window and provide the text written there after you executed the curl command

aetxeberriasqs commented 2 years ago

Hi, this time I am running it with dockers following the steps at the fraunhofer page.

image

bellebaum commented 2 years ago

Then use docker: https://docs.docker.com/engine/reference/commandline/logs/

aetxeberriasqs commented 2 years ago

Hi, this is what the command line responds:

sqs@Virtual-Ubuntu-20:~/DAPS_DOCKERS_ALEX/omejdn-daps/omejdn-server/scripts$ docker logs omejdn "No claim mappers available" == Sinatra (v2.1.0) has taken the stage on 4567 for development with backup from Thin 172.17.0.1 - - [20/Dec/2021:14:50:41 +0000] "GET / HTTP/1.1" 404 458 0.0172 172.17.0.1 - - [20/Dec/2021:14:50:41 +0000] "GET /sinatra/404.png HTTP/1.1" 200 18893 0.0228 2021-12-20 14:50:36 +0000 Thin web server (v1.8.1 codename Infinite Smoothie) 2021-12-20 14:50:36 +0000 Maximum connections set to 1024 2021-12-20 14:50:36 +0000 Listening on 0.0.0.0:4567, CTRL+C to stop looking for client of eyJhbGciOiJSUzI1NiJ9.eyJpc3MiOiIxNjoyNzpDNTpDNDo4Mzo1OTozRjo0RDpENTpDMDo4Mzo1RTo0Rjo2NjpDNjpGNzpEQTpENTowRjo4ODprZXlpZDoxNjoyNzpDNTpDNDo4Mzo1OTozRjo0RDpENTpDMDo4Mzo1RTo0Rjo2NjpDNjpGNzpEQTpENTowRjo4OCIsInN1YiI6IjE2OjI3OkM1OkM0OjgzOjU5OjNGOjREOkQ1OkMwOjgzOjVFOjRGOjY2OkM2OkY3OkRBOkQ1OjBGOjg4OmtleWlkOjE2OjI3OkM1OkM0OjgzOjU5OjNGOjREOkQ1OkMwOjgzOjVFOjRGOjY2OkM2OkY3OkRBOkQ1OjBGOjg4IiwiZXhwIjoxNjQwMDE1NTQ3LCJuYmYiOjE2NDAwMTE5NDcsImlhdCI6MTY0MDAxMTk0NywiYXVkIjoiaWRzYzpJRFNfQ09OTkVDVE9SU19BTEwifQ.jVaJ0OtS-xaH-eq0vVntvjOA8UAzlWIoHVFjO9efDPcHQQCLgtHzeKd8w932XQMicxv2iQwVzLYbYhZyzhtOJMLG4hPLC0R5MeoMBeb6tmphhl7PyMVk5m-cb6y-UUu4GeSY4RKjVEC1IvKk0sL41yOBlmcKL1FA_AuOOrzL8PCPqBzXPybx5YTScZBOHDAxBRxyaCUM8WLTKnkrOAlScIyjM2IiniD545-DOstLcya-0CG9F5DvHWyek_jaklnupkWCC69UM9AhfJNyaYpXf3NCdC0zulzGFk3L9Ioy6_1dHgCPpwqtn5BZaBATIrRgtNY7fDwagwlRJqebCJ23OQ Client 16:27:C5:C4:83:59:3F:4D:D5:C0:83:5E:4F:66:C6:F7:DA:D5:0F:88:keyid:16:27:C5:C4:83:59:3F:4D:D5:C0:83:5E:4F:66:C6:F7:DA:D5:0F:88 found Tried DAPS: Signature verification raised {"error"=>"invalid_client", "error_description"=>"Client unknown"} 172.17.0.1 - - [20/Dec/2021:14:53:41 +0000] "POST /token HTTP/1.1" 400 63 0.0066 looking for client of {eyJhbGciOiJSUzI1NiJ9.eyJpc3MiOiIxNjoyNzpDNTpDNDo4Mzo1OTozRjo0RDpENTpDMDo4Mzo1RTo0Rjo2NjpDNjpGNzpEQTpENTowRjo4ODprZXlpZDoxNjoyNzpDNTpDNDo4Mzo1OTozRjo0RDpENTpDMDo4Mzo1RTo0Rjo2NjpDNjpGNzpEQTpENTowRjo4OCIsInN1YiI6IjE2OjI3OkM1OkM0OjgzOjU5OjNGOjREOkQ1OkMwOjgzOjVFOjRGOjY2OkM2OkY3OkRBOkQ1OjBGOjg4OmtleWlkOjE2OjI3OkM1OkM0OjgzOjU5OjNGOjREOkQ1OkMwOjgzOjVFOjRGOjY2OkM2OkY3OkRBOkQ1OjBGOjg4IiwiZXhwIjoxNjQwMDE1NTQ3LCJuYmYiOjE2NDAwMTE5NDcsImlhdCI6MTY0MDAxMTk0NywiYXVkIjoiaWRzYzpJRFNfQ09OTkVDVE9SU19BTEwifQ.jVaJ0OtS-xaH-eq0vVntvjOA8UAzlWIoHVFjO9efDPcHQQCLgtHzeKd8w932XQMicxv2iQwVzLYbYhZyzhtOJMLG4hPLC0R5MeoMBeb6tmphhl7PyMVk5m-cb6y-UUu4GeSY4RKjVEC1IvKk0sL41yOBlmcKL1FA_AuOOrzL8PCPqBzXPybx5YTScZBOHDAxBRxyaCUM8WLTKnkrOAlScIyjM2IiniD545-DOstLcya-0CG9F5DvHWyek_jaklnupkWCC69UM9AhfJNyaYpXf3NCdC0zulzGFk3L9Ioy6_1dHgCPpwqtn5BZaBATIrRgtNY7fDwagwlRJqebCJ23OQ} Client 16:27:C5:C4:83:59:3F:4D:D5:C0:83:5E:4F:66:C6:F7:DA:D5:0F:88:keyid:16:27:C5:C4:83:59:3F:4D:D5:C0:83:5E:4F:66:C6:F7:DA:D5:0F:88 found Tried DAPS: Signature verification raised {"error"=>"invalid_client", "error_description"=>"Client unknown"} 172.17.0.1 - - [20/Dec/2021:14:54:14 +0000] "POST /token HTTP/1.1" 400 63 0.0075 looking for client of eyJhbGciOiJSUzI1NiJ9.eyJpc3MiOiIxNjoyNzpDNTpDNDo4Mzo1OTozRjo0RDpENTpDMDo4Mzo1RTo0Rjo2NjpDNjpGNzpEQTpENTowRjo4ODprZXlpZDoxNjoyNzpDNTpDNDo4Mzo1OTozRjo0RDpENTpDMDo4Mzo1RTo0Rjo2NjpDNjpGNzpEQTpENTowRjo4OCIsInN1YiI6IjE2OjI3OkM1OkM0OjgzOjU5OjNGOjREOkQ1OkMwOjgzOjVFOjRGOjY2OkM2OkY3OkRBOkQ1OjBGOjg4OmtleWlkOjE2OjI3OkM1OkM0OjgzOjU5OjNGOjREOkQ1OkMwOjgzOjVFOjRGOjY2OkM2OkY3OkRBOkQ1OjBGOjg4IiwiZXhwIjoxNjQwMDc4NDc4LCJuYmYiOjE2NDAwNzQ4NzgsImlhdCI6MTY0MDA3NDg3OCwiYXVkIjoiaWRzYzpJRFNfQ09OTkVDVE9SU19BTEwifQ.AuiCeFJrsHop6qc8IABFQCdbGW6rzfKeDrtVRvPbQQtcl8w2BjlzgLP28N3oXJ83rGYx7K565WkKOVj3Plob1iZrV2EutEBu0FV1pVl6ymLrdlxlSY37yVA6GWFu3Shn_eSqzV_QovzyYUywy0dcEQj3HBF8ovo0MR3j3qHAVmRNJmhpOUrIalhmThBJiCCyfYsRnHA8TCS6Wn08MgdMBrdjdsBgF3M_TmkfZN5mfJmYFPtGKNSN1pWwQYqvN_M5t-wg4m61csqhWW5BFuaqhM19E08b4vLjVblhdIH7uUuNnvPEclqOqHYt75Aov0bvgC_hO0Tm8vGaSMjDZxh5Uw Client 16:27:C5:C4:83:59:3F:4D:D5:C0:83:5E:4F:66:C6:F7:DA:D5:0F:88:keyid:16:27:C5:C4:83:59:3F:4D:D5:C0:83:5E:4F:66:C6:F7:DA:D5:0F:88 found {"error"=>"access_denied", "error_description"=>""} 172.17.0.1 - - [21/Dec/2021:08:22:01 +0000] "POST /token HTTP/1.1" 400 48 0.0067 172.17.0.1 - - [21/Dec/2021:11:05:35 +0000] "POST /token HTTP/1.1" 200 1533 0.0114 looking for client of eyJhbGciOiJSUzI1NiJ9.eyJpc3MiOiIxNjoyNzpDNTpDNDo4Mzo1OTozRjo0RDpENTpDMDo4Mzo1RTo0Rjo2NjpDNjpGNzpEQTpENTowRjo4ODprZXlpZDoxNjoyNzpDNTpDNDo4Mzo1OTozRjo0RDpENTpDMDo4Mzo1RTo0Rjo2NjpDNjpGNzpEQTpENTowRjo4OCIsInN1YiI6IjE2OjI3OkM1OkM0OjgzOjU5OjNGOjREOkQ1OkMwOjgzOjVFOjRGOjY2OkM2OkY3OkRBOkQ1OjBGOjg4OmtleWlkOjE2OjI3OkM1OkM0OjgzOjU5OjNGOjREOkQ1OkMwOjgzOjVFOjRGOjY2OkM2OkY3OkRBOkQ1OjBGOjg4IiwiZXhwIjoxNjQwMDg4MzM1LCJuYmYiOjE2NDAwODQ3MzUsImlhdCI6MTY0MDA4NDczNSwiYXVkIjoiaWRzYzpJRFNfQ09OTkVDVE9SU19BTEwifQ.A9rE_vaFPOV7JCY9zYW80cNx9sucp8LEcMjgwndhTb-QaBC1pvFDWN17drShragSk2hDJ-85RyLZLnUg_npDIJ4ncFoAaDCnRx6BdhqaL4SXRlZ_MHyR9UpNdc4dC4EL_YcpPrWcKkOoGF9hn2Pz2QaC_ZXs67xCi7-5-a0Azk8Bfw4EXcKK5OcQLLPHmRZIy4nmj63kU4ovD4XEFeJZxex5L-2OeY3FeumIemMp4cqW6TGPdLzBUsEiw2u2m56SXnSWIfPSOgcdEYE-9f3UKwbBOvSOMraBWz-202OLaFISYznkqQXMzDJ_v3oYqAYc5JKB02YBC06EfKCRvi-Klw Client 16:27:C5:C4:83:59:3F:4D:D5:C0:83:5E:4F:66:C6:F7:DA:D5:0F:88:keyid:16:27:C5:C4:83:59:3F:4D:D5:C0:83:5E:4F:66:C6:F7:DA:D5:0F:88 found looking for client of eyJhbGciOiJSUzI1NiJ9.eyJpc3MiOiIxNjoyNzpDNTpDNDo4Mzo1OTozRjo0RDpENTpDMDo4Mzo1RTo0Rjo2NjpDNjpGNzpEQTpENTowRjo4ODprZXlpZDoxNjoyNzpDNTpDNDo4Mzo1OTozRjo0RDpENTpDMDo4Mzo1RTo0Rjo2NjpDNjpGNzpEQTpENTowRjo4OCIsInN1YiI6IjE2OjI3OkM1OkM0OjgzOjU5OjNGOjREOkQ1OkMwOjgzOjVFOjRGOjY2OkM2OkY3OkRBOkQ1OjBGOjg4OmtleWlkOjE2OjI3OkM1OkM0OjgzOjU5OjNGOjREOkQ1OkMwOjgzOjVFOjRGOjY2OkM2OkY3OkRBOkQ1OjBGOjg4IiwiZXhwIjoxNjQwMDc4NDc4LCJuYmYiOjE2NDAwNzQ4NzgsImlhdCI6MTY0MDA3NDg3OCwiYXVkIjoiaWRzYzpJRFNfQ09OTkVDVE9SU19BTEwifQ.AuiCeFJrsHop6qc8IABFQCdbGW6rzfKeDrtVRvPbQQtcl8w2BjlzgLP28N3oXJ83rGYx7K565WkKOVj3Plob1iZrV2EutEBu0FV1pVl6ymLrdlxlSY37yVA6GWFu3Shn_eSqzV_QovzyYUywy0dcEQj3HBF8ovo0MR3j3qHAVmRNJmhpOUrIalhmThBJiCCyfYsRnHA8TCS6Wn08MgdMBrdjdsBgF3M_TmkfZN5mfJmYFPtGKNSN1pWwQYqvN_M5t-wg4m61csqhWW5BFuaqhM19E08b4vLjVblhdIH7uUuNnvPEclqOqHYt75Aov0bvgC_hO0Tm8vGaSMjDZxh5Uw Client 16:27:C5:C4:83:59:3F:4D:D5:C0:83:5E:4F:66:C6:F7:DA:D5:0F:88:keyid:16:27:C5:C4:83:59:3F:4D:D5:C0:83:5E:4F:66:C6:F7:DA:D5:0F:88 found Tried DAPS: Signature has expired {"error"=>"invalid_client", "error_description"=>"Client unknown"} 172.17.0.1 - - [21/Dec/2021:11:10:14 +0000] "POST /token HTTP/1.1" 400 63 0.0047 looking for client of eyJhbGciOiJSUzI1NiJ9.eyJpc3MiOiIxNjoyNzpDNTpDNDo4Mzo1OTozRjo0RDpENTpDMDo4Mzo1RTo0Rjo2NjpDNjpGNzpEQTpENTowRjo4ODprZXlpZDoxNjoyNzpDNTpDNDo4Mzo1OTozRjo0RDpENTpDMDo4Mzo1RTo0Rjo2NjpDNjpGNzpEQTpENTowRjo4OCIsInN1YiI6IjE2OjI3OkM1OkM0OjgzOjU5OjNGOjREOkQ1OkMwOjgzOjVFOjRGOjY2OkM2OkY3OkRBOkQ1OjBGOjg4OmtleWlkOjE2OjI3OkM1OkM0OjgzOjU5OjNGOjREOkQ1OkMwOjgzOjVFOjRGOjY2OkM2OkY3OkRBOkQ1OjBGOjg4IiwiZXhwIjoxNjQwMDc4NDc4LCJuYmYiOjE2NDAwNzQ4NzgsImlhdCI6MTY0MDA3NDg3OCwiYXVkIjoiaWRzYzpJRFNfQ09OTkVDVE9SU19BTEwifQ.AuiCeFJrsHop6qc8IABFQCdbGW6rzfKeDrtVRvPbQQtcl8w2BjlzgLP28N3oXJ83rGYx7K565WkKOVj3Plob1iZrV2EutEBu0FV1pVl6ymLrdlxlSY37yVA6GWFu3Shn_eSqzV_QovzyYUywy0dcEQj3HBF8ovo0MR3j3qHAVmRNJmhpOUrIalhmThBJiCCyfYsRnHA8TCS6Wn08MgdMBrdjdsBgF3M_TmkfZN5mfJmYFPtGKNSN1pWwQYqvN_M5t-wg4m61csqhWW5BFuaqhM19E08b4vLjVblhdIH7uUuNnvPEclqOqHYt75Aov0bvgC_hO0Tm8vGaSMjDZxh5Uw Client 16:27:C5:C4:83:59:3F:4D:D5:C0:83:5E:4F:66:C6:F7:DA:D5:0F:88:keyid:16:27:C5:C4:83:59:3F:4D:D5:C0:83:5E:4F:66:C6:F7:DA:D5:0F:88 found Tried DAPS: Signature has expired {"error"=>"invalid_client", "error_description"=>"Client unknown"} 172.17.0.1 - - [21/Dec/2021:11:10:32 +0000] "POST /token HTTP/1.1" 400 63 0.0058 looking for client of eyJhbGciOiJSUzI1NiJ9.eyJpc3MiOiIxNjoyNzpDNTpDNDo4Mzo1OTozRjo0RDpENTpDMDo4Mzo1RTo0Rjo2NjpDNjpGNzpEQTpENTowRjo4ODprZXlpZDoxNjoyNzpDNTpDNDo4Mzo1OTozRjo0RDpENTpDMDo4Mzo1RTo0Rjo2NjpDNjpGNzpEQTpENTowRjo4OCIsInN1YiI6IjE2OjI3OkM1OkM0OjgzOjU5OjNGOjREOkQ1OkMwOjgzOjVFOjRGOjY2OkM2OkY3OkRBOkQ1OjBGOjg4OmtleWlkOjE2OjI3OkM1OkM0OjgzOjU5OjNGOjREOkQ1OkMwOjgzOjVFOjRGOjY2OkM2OkY3OkRBOkQ1OjBGOjg4IiwiZXhwIjoxNjQwMDg5Mzg4LCJuYmYiOjE2NDAwODU3ODgsImlhdCI6MTY0MDA4NTc4OCwiYXVkIjoiaWRzYzpJRFNfQ09OTkVDVE9SX0FUVFJJQlVURVNfQUxMIn0.KzomHZ4wN_ICps14zbpdAjlx4lQH-l1IvyUA5-b-fu5hX3Bd0S-58NH1oN0uvlPLyOvynbiuLvlpa9xt2Rerm412ogvcSD679210iqS_zYw0eVvoij0tib278i0xfjE1SSiTl6S-PZeVCVANb0j8dHT0BndG8CR7djITXR2U9C_G3in43fbAmWhYUyMScj-EPNRanokrhHcc_J8vHPULR_PX7sM0HDgTs1Ri4g7z-UWcwTita9HSFtZ0Sfn6RDn91hsSLzVKrsEIRoCw4PBPQ8QJ6WWhaAMTqDfCxykHXVM13cyHZ0i_YFGCFgm1OLHL8L4Lvv75TE8NIW2nTE9mTg Client 16:27:C5:C4:83:59:3F:4D:D5:C0:83:5E:4F:66:C6:F7:DA:D5:0F:88:keyid:16:27:C5:C4:83:59:3F:4D:D5:C0:83:5E:4F:66:C6:F7:DA:D5:0F:88 found Tried DAPS: Invalid audience. Expected idsc:IDS_CONNECTORS_ALL, received idsc:IDS_CONNECTOR_ATTRIBUTES_ALL {"error"=>"invalid_client", "error_description"=>"Client unknown"} 172.17.0.1 - - [21/Dec/2021:11:23:51 +0000] "POST /token HTTP/1.1" 400 63 0.0032 looking for client of eyJhbGciOiJSUzI1NiJ9.eyJpc3MiOiIxNjoyNzpDNTpDNDo4Mzo1OTozRjo0RDpENTpDMDo4Mzo1RTo0Rjo2NjpDNjpGNzpEQTpENTowRjo4ODprZXlpZDoxNjoyNzpDNTpDNDo4Mzo1OTozRjo0RDpENTpDMDo4Mzo1RTo0Rjo2NjpDNjpGOkQ1OjBGOjg4Iiwic3ViIjoiMTY6Mjc6QzU6QzQ6ODM6NTk6M0Y6NEQ6RDU6QzA6ODM6NUU6NEY6NjY6QzY6Rjc6REE6RDU6MEY6ODg6a2V5aWQ6MTY6Mjc6QzU6QzQ6ODM6NTk6M0Y6NEQ6RDU6QzA6ODM6NUU6NEY6NjY6QzY6RjpENTowRjo4OCIsImV4cCI6MTY0MDA5MTAxMiwibmJmIjoxNjQwMDg3NDEyLCJpYXQiOjE2NDAwODc0MTIsImF1ZCI6Imlkc2M6SURTX0NPTk5FQ1RPUl9BVFRSSUJVVEVTX0FMTCJ9.me6XDMeCEDAHD7o32JvE_oh4aZYd5RYroQ4w7o9l3a6KZb3Oeq-rLadDlSDAjQxyXCeUBk-b0fOHljI414m9CSHp6fPDhZZvt9aTc4GgXV3C2kan_wSiEYWFgdLx2wg5yjcGBCqcCW71Qe0utK9P0jEa0WIQmvPcPgfjqBNGvnO3w4vcQNxCJ5hV7jV7Om-cVpfzzstyQxz6ohB0Op08vCvXh2AOz1B2uqnmYea4AIat9flz7IQrgSYoJKk2FrDAToOP9eZTcOaC8C8BbOABPUHXhQmtWypa_k295SHikmfvqC9ewxsceAyTQUFtRYx_hLYCRZ1pblooJF9IeihBPw ERROR: Client 16:27:C5:C4:83:59:3F:4D:D5:C0:83:5E:4F:66:C6:F7:DA:D5:0F:88:keyid:16:27:C5:C4:83:59:3F:4D:D5:C0:83:5E:4F:66:C6:F:D5:0F:88 does not exist {"error"=>"invalid_client", "error_description"=>"Client unknown"} 172.17.0.1 - - [21/Dec/2021:11:51:14 +0000] "POST /token HTTP/1.1" 400 63 0.0042 looking for client of eyJhbGciOiJSUzI1NiJ9.eyJpc3MiOiIxNjoyNzpDNTpDNDo4Mzo1OTozRjo0RDpENTpDMDo4Mzo1RTo0Rjo2NjpDNjpGNzpEQTpENTowRjo4ODprZXlpZDoxNjoyNzpDNTpDNDo4Mzo1OTozRjo0RDpENTpDMDo4Mzo1RTo0Rjo2NjpDNjpGOkQ1OjBGOjg4Iiwic3ViIjoiMTY6Mjc6QzU6QzQ6ODM6NTk6M0Y6NEQ6RDU6QzA6ODM6NUU6NEY6NjY6QzY6Rjc6REE6RDU6MEY6ODg6a2V5aWQ6MTY6Mjc6QzU6QzQ6ODM6NTk6M0Y6NEQ6RDU6QzA6ODM6NUU6NEY6NjY6QzY6RjpENTowRjo4OCIsImV4cCI6MTY0MDA5MTAxMiwibmJmIjoxNjQwMDg3NDEyLCJpYXQiOjE2NDAwODc0MTIsImF1ZCI6Imlkc2M6SURTX0NPTk5FQ1RPUl9BVFRSSUJVVEVTX0FMTCJ9.me6XDMeCEDAHD7o32JvE_oh4aZYd5RYroQ4w7o9l3a6KZb3Oeq-rLadDlSDAjQxyXCeUBk-b0fOHljI414m9CSHp6fPDhZZvt9aTc4GgXV3C2kan_wSiEYWFgdLx2wg5yjcGBCqcCW71Qe0utK9P0jEa0WIQmvPcPgfjqBNGvnO3w4vcQNxCJ5hV7jV7Om-cVpfzzstyQxz6ohB0Op08vCvXh2AOz1B2uqnmYea4AIat9flz7IQrgSYoJKk2FrDAToOP9eZTcOaC8C8BbOABPUHXhQmtWypa_k295SHikmfvqC9ewxsceAyTQUFtRYx_hLYCRZ1pblooJF9IeihBPw ERROR: Client 16:27:C5:C4:83:59:3F:4D:D5:C0:83:5E:4F:66:C6:F7:DA:D5:0F:88:keyid:16:27:C5:C4:83:59:3F:4D:D5:C0:83:5E:4F:66:C6:F:D5:0F:88 does not exist {"error"=>"invalid_client", "error_description"=>"Client unknown"} 172.17.0.1 - - [21/Dec/2021:15:40:06 +0000] "POST /token HTTP/1.1" 400 63 0.0041 172.17.0.1 - - [21/Dec/2021:15:44:57 +0000] "POST /token HTTP/1.1" 200 1533 0.0118 looking for client of eyJhbGciOiJSUzI1NiJ9.eyJpc3MiOiIxNjoyNzpDNTpDNDo4Mzo1OTozRjo0RDpENTpDMDo4Mzo1RTo0Rjo2NjpDNjpGNzpEQTpENTowRjo4ODprZXlpZDoxNjoyNzpDNTpDNDo4Mzo1OTozRjo0RDpENTpDMDo4Mzo1RTo0Rjo2NjpDNjpGNzpEQTpENTowRjo4OCIsInN1YiI6IjE2OjI3OkM1OkM0OjgzOjU5OjNGOjREOkQ1OkMwOjgzOjVFOjRGOjY2OkM2OkY3OkRBOkQ1OjBGOjg4OmtleWlkOjE2OjI3OkM1OkM0OjgzOjU5OjNGOjREOkQ1OkMwOjgzOjVFOjRGOjY2OkM2OkY3OkRBOkQ1OjBGOjg4IiwiZXhwIjoxNjQwMTA1MDk3LCJuYmYiOjE2NDAxMDE0OTcsImlhdCI6MTY0MDEwMTQ5NywiYXVkIjoiaWRzYzpJRFNfQ09OTkVDVE9SU19BTEwifQ.NxLkUxhPOm-7IgE_2648og7FAWJiybvjqqnD-OnVqQGyx4vfbf9vdtFfChi2SAOprxNlpOx31SuZYbsXCQcVWT8JWpT7EQ0X20qxtcteiUOuYnTU-6LrkL9fZS5XiYSVK72FJzbsSuOVzbJ9WZ6xMG1r1PNEJZTPMA0r6Z7iSyZtKITy0iGymL_Gw_hzu0TBCKNdIjcBSglc_GW6N7j_tkUoSEaCe08XELzWfaCXlZwtMYpkJidKcx2D6AKu-ZQkmB-ZDXuzkMhMf0oyP4oyB0Os2xBkrFdqa6Hk9sgjUKEiVOhWaDkHzFdWRTTs4wSqD5ypgol8RA4gMZaKUH0-og Client 16:27:C5:C4:83:59:3F:4D:D5:C0:83:5E:4F:66:C6:F7:DA:D5:0F:88:keyid:16:27:C5:C4:83:59:3F:4D:D5:C0:83:5E:4F:66:C6:F7:DA:D5:0F:88 found looking for client of eyJhbGciOiJSUzI1NiJ9.eyJpc3MiOiIxNjoyNzpDNTpDNDo4Mzo1OTozRjo0RDpENTpDMDo4Mzo1RTo0Rjo2NjpDNjpGNzpEQTpENTowRjo4ODprZXlpZDoxNjoyNzpDNTpDNDo4Mzo1OTozRjo0RDpENTpDMDo4Mzo1RTo0Rjo2NjpDNjpGNzpEQTpENTowRjo4OCIsInN1YiI6IjE2OjI3OkM1OkM0OjgzOjU5OjNGOjREOkQ1OkMwOjgzOjVFOjRGOjY2OkM2OkY3OkRBOkQ1OjBGOjg4OmtleWlkOjE2OjI3OkM1OkM0OjgzOjU5OjNGOjREOkQ1OkMwOjgzOjVFOjRGOjY2OkM2OkY3OkRBOkQ1OjBGOjg4IiwiZXhwIjoxNjQwMTA1MjY1LCJuYmYiOjE2NDAxMDE2NjUsImlhdCI6MTY0MDEwMTY2NSwiYXVkIjoiaWRzYzpJRFNfQ09OTkVDVE9SX0FUVFJJQlVURVNfQUxMIn0.KWHuZmrATa12RalPkah049nrY5Jj8Cg6QLOYxs7XqzmL2KwAZzNGZR0Hr4fXtPTgPemOwt9UwtHMWwSPA2Urt5jWrZ6bnNhqXlhFBrbMeB6sUb7TscF9QeKqB4t08uXvtyqOg_z8hrC7op8SHqqJdfiSvNELMioSeJQZsWBKC-NRvzPlHrkOzlMRjg3ROW55QSYMva734QVvtK7t5bbpqaGGADRqAis7nzOKHwjz590vhQndHQ7ElTGIV4erHV-FmwAcMHT_XRRWlUGHopD8nOOdJ6ka-3FJxzREXHrGr-ypD_ctx83oGoTVj4gQ5sXPJ0hCLvsddAzg4dJmwCYkwg Client 16:27:C5:C4:83:59:3F:4D:D5:C0:83:5E:4F:66:C6:F7:DA:D5:0F:88:keyid:16:27:C5:C4:83:59:3F:4D:D5:C0:83:5E:4F:66:C6:F7:DA:D5:0F:88 found Tried DAPS: Invalid audience. Expected idsc:IDS_CONNECTORS_ALL, received idsc:IDS_CONNECTOR_ATTRIBUTES_ALL {"error"=>"invalid_client", "error_description"=>"Client unknown"} 172.17.0.1 - - [21/Dec/2021:15:51:05 +0000] "POST /token HTTP/1.1" 400 63 0.0097 looking for client of eyJhbGciOiJSUzI1NiJ9.eyJpc3MiOiIxNjoyNzpDNTpDNDo4Mzo1OTozRjo0RDpENTpDMDo4Mzo1RTo0Rjo2NjpDNjpGNzpEQTpENTowRjo4ODprZXlpZDoxNjoyNzpDNTpDNDo4Mzo1OTozRjo0RDpENTpDMDo4Mzo1RTo0Rjo2NjpDNjpGNzpEQTpENTowRjo4OCIsInN1YiI6IjE2OjI3OkM1OkM0OjgzOjU5OjNGOjREOkQ1OkMwOjgzOjVFOjRGOjY2OkM2OkY3OkRBOkQ1OjBGOjg4OmtleWlkOjE2OjI3OkM1OkM0OjgzOjU5OjNGOjREOkQ1OkMwOjgzOjVFOjRGOjY2OkM2OkY3OkRBOkQ1OjBGOjg4IiwiZXhwIjoxNjQwMTA1MjY1LCJuYmYiOjE2NDAxMDE2NjUsImlhdCI6MTY0MDEwMTY2NSwiYXVkIjoiaWRzYzpJRFNfQ09OTkVDVE9SX0FUVFJJQlVURVNfQUxMIn0.KWHuZmrATa12RalPkah049nrY5Jj8Cg6QLOYxs7XqzmL2KwAZzNGZR0Hr4fXtPTgPemOwt9UwtHMWwSPA2Urt5jWrZ6bnNhqXlhFBrbMeB6sUb7TscF9QeKqB4t08uXvtyqOg_z8hrC7op8SHqqJdfiSvNELMioSeJQZsWBKC-NRvzPlHrkOzlMRjg3ROW55QSYMva734QVvtK7t5bbpqaGGADRqAis7nzOKHwjz590vhQndHQ7ElTGIV4erHV-FmwAcMHT_XRRWlUGHopD8nOOdJ6ka-3FJxzREXHrGr-ypD_ctx83oGoTVj4gQ5sXPJ0hCLvsddAzg4dJmwCYkwg Client 16:27:C5:C4:83:59:3F:4D:D5:C0:83:5E:4F:66:C6:F7:DA:D5:0F:88:keyid:16:27:C5:C4:83:59:3F:4D:D5:C0:83:5E:4F:66:C6:F7:DA:D5:0F:88 found Tried DAPS: Invalid audience. Expected idsc:IDS_CONNECTORS_ALL, received idsc:IDS_CONNECTOR_ATTRIBUTES_ALL {"error"=>"invalid_client", "error_description"=>"Client unknown"} 172.17.0.1 - - [21/Dec/2021:15:51:34 +0000] "POST /token HTTP/1.1" 400 63 0.0030 looking for client of eyJhbGciOiJSUzI1NiJ9.eyJpc3MiOiIxNjoyNzpDNTpDNDo4Mzo1OTozRjo0RDpENTpDMDo4Mzo1RTo0Rjo2NjpDNjpGNzpEQTpENTowRjo4ODprZXlpZDoxNjoyNzpDNTpDNDo4Mzo1OTozRjo0RDpENTpDMDo4Mzo1RTo0Rjo2NjpDNjpGNzpEQTpENTowRjo4OCIsInN1YiI6IjE2OjI3OkM1OkM0OjgzOjU5OjNGOjREOkQ1OkMwOjgzOjVFOjRGOjY2OkM2OkY3OkRBOkQ1OjBGOjg4OmtleWlkOjE2OjI3OkM1OkM0OjgzOjU5OjNGOjREOkQ1OkMwOjgzOjVFOjRGOjY2OkM2OkY3OkRBOkQ1OjBGOjg4IiwiZXhwIjoxNjQwMTY3MTMxLCJuYmYiOjE2NDAxNjM1MzEsImlhdCI6MTY0MDE2MzUzMSwiYXVkIjoiaWRzYzpJRFNfQ09OTkVDVE9SX0FUVFJJQlVURVNfQUxMIn0.infVYMX17Ttb-uLFfNMEMh-9O2czw69Dfb-YEf-ujwTnhu4OzhQZ7SbCYEyW63_HRv5-fPVXOT3AS7qf_AA6kGb4QR7PP3EAPEKmle_AUEWERUVPQR08CDxNSF-d3ZEHXvbzRJEBLSkvmtlwK4uiuztu_GpZVZ3a7gSmqYZZQnT4ZTpHia-dcPGaJkYSmt5q-M79OYUv0sz_WWiRE1p3z00rAhgO9hXbAfgtz7ADgeIFn-DotCk2ejrIP2h2tw_O5vlIdppMQ0OfCKlw4yY01dd5QiTSxQJIQcd-26--p4ZNLPuhj-wAaifHjnhDjtYzPtcnvFgjj-zJ4WmUJwhhRw Client 16:27:C5:C4:83:59:3F:4D:D5:C0:83:5E:4F:66:C6:F7:DA:D5:0F:88:keyid:16:27:C5:C4:83:59:3F:4D:D5:C0:83:5E:4F:66:C6:F7:DA:D5:0F:88 found Tried DAPS: Invalid audience. Expected idsc:IDS_CONNECTORS_ALL, received idsc:IDS_CONNECTOR_ATTRIBUTES_ALL {"error"=>"invalid_client", "error_description"=>"Client unknown"} 172.17.0.1 - - [22/Dec/2021:09:00:40 +0000] "POST /token HTTP/1.1" 400 63 0.0073

bellebaum commented 2 years ago

Invalid audience. Expected idsc:IDS_CONNECTORS_ALL, received idsc:IDS_CONNECTOR_ATTRIBUTES_ALL

There we go :) Use this for the create_test_token.rb script instead

aetxeberriasqs commented 2 years ago

Should I change the idsc:IDS_CONNECTORS_ALL instead of idsc:IDS_CONNECTOR_ATTRIBUTES_ALL also in the curl command?

bellebaum commented 2 years ago

No, those are very different concepts:

audience refers to the audience of the DAT, which the IDS Information Model dictates to be idsc:IDS_CONNECTORS_ALL. scope in the curl command refers to certain access rights and attributes included within the DAT, and for those you have to specify idsc:IDS_CONNECTOR_ATTRIBUTES_ALL

aetxeberriasqs commented 2 years ago

Ok, I have tried changing the change and here is the console:

sqs@Virtual-Ubuntu-20:~/DAPS_DOCKERS_ALEX/omejdn-daps/omejdn-serversqs@Virtual-Ubuntu-20:~/DAPS_DOCKERS_ALEX/omejdn-daps/omejdn-server/scripts$ ./create_test_token.rb 16:27:C5:C4:83:59:3F:4D:D5:C0:83:5E:4F:66:C6:F7:DA:D5:0F:88:keyid:16:27:C5:C4:83:59:3F:4D:D5:C0:83:5E:4F:66:C6:F7:DA:D5:0F:88 DAPS.key idsc:IDS_CONNECTORS_ALL eyJhbGciOiJSUzI1NiJ9.eyJpc3MiOiIxNjoyNzpDNTpDNDo4Mzo1OTozRjo0RDpENTpDMDo4Mzo1RTo0Rjo2NjpDNjpGNzpEQTpENTowRjo4ODprZXlpZDoxNjoyNzpDNTpDNDo4Mzo1OTozRjo0RDpENTpDMDo4Mzo1RTo0Rjo2NjpDNjpGNzpEQTpENTowRjo4OCIsInN1YiI6IjE2OjI3OkM1OkM0OjgzOjU5OjNGOjREOkQ1OkMwOjgzOjVFOjRGOjY2OkM2OkY3OkRBOkQ1OjBGOjg4OmtleWlkOjE2OjI3OkM1OkM0OjgzOjU5OjNGOjREOkQ1OkMwOjgzOjVFOjRGOjY2OkM2OkY3OkRBOkQ1OjBGOjg4IiwiZXhwIjoxNjQwMTcxNTYyLCJuYmYiOjE2NDAxNjc5NjIsImlhdCI6MTY0MDE2Nzk2MiwiYXVkIjoiaWRzYzpJRFNfQ09OTkVDVE9SU19BTEwifQ.p-rUJZLOY7u8oaZVJuOX8EXPD6X1KTZmMHnhRu47qbIjsxe51_rzI0TccyukUgsSqFSjnJf4i370J3ypj5qRDhf5Y5rnHyUhrGHPBY2NKYguJGmhWQWh6XCiQnTrjDiZS89HoCDD_k_2t4eR-DAy2dH28vaZW3UMsAsyyT_UF7KVulPAYfjPfN3sSngBijjjLURjwo3WDTHM4uQo2x3ZYXdJkUJf0OPufyDXSXHWuVd4WxcmvDt2Hv7w5vXw0isccEty23olSuTBrEije-7JcYlhS7gr1tu3ka0CLjVzvMfwi9kta_LiLToYeH7WTEoViobSHwDiIEGejOOcLgaWbA sqs@Virtual-Ubuntu-20:~/DAPS_DOCKERS_ALEX/omejdn-daps/omejdn-server/scripts$ curl localhost:4567/token --data "grant_type=client_credentials&client_assertion_type=urn:ietf:params:oauth:client-assertion-type:jwt-bearer&client_assertion=eyJhbGciOiJSUzI1NiJ9.eyJpc3MiOiIxNjoyNzpDNTpDNDo4Mzo1OTozRjo0RDpENTpDMDo4Mzo1RTo0Rjo2NjpDNjpGNzpEQTpENTowRjo4ODprZXlpZDoxNjoyNzpDNTpDNDo4Mzo1OTozRjo0RDpENTpDMDo4Mzo1RTo0Rjo2NjpDNjpGNzpEQTpENTowRjo4OCIsInN1YiI6IjE2OjI3OkM1OkM0OjgzOjU5OjNGOjREOkQ1OkMwOjgzOjVFOjRGOjY2OkM2OkY3OkRBOkQ1OjBGOjg4OmtleWlkOjE2OjI3OkM1OkM0OjgzOjU5OjNGOjREOkQ1OkMwOjgzOjVFOjRGOjY2OkM2OkY3OkRBOkQ1OjBGOjg4IiwiZXhwIjoxNjQwMTcxNTYyLCJuYmYiOjE2NDAxNjc5NjIsImlhdCI6MTY0MDE2Nzk2MiwiYXVkIjoiaWRzYzpJRFNfQ09OTkVDVE9SU19BTEwifQ.p-rUJZLOY7u8oaZVJuOX8EXPD6X1KTZmMHnhRu47qbIjsxe51_rzI0TccyukUgsSqFSjnJf4i370J3ypj5qRDhf5Y5rnHyUhrGHPBY2NKYguJGmhWQWh6XCiQnTrjDiZS89HoCDD_k_2t4eR-DAy2dH28vaZW3UMsAsyyT_UF7KVulPAYfjPfN3sSngBijjjLURjwo3WDTHM4uQo2x3ZYXdJkUJf0OPufyDXSXHWuVd4WxcmvDt2Hv7w5vXw0isccEty23olSuTBrEije-7JcYlhS7gr1tu3ka0CLjVzvMfwi9kta_LiLToYeH7WTEoViobSHwDiIEGejOOcLgaWbA&scope=idsc:IDS_CONNECTOR_ATTRIBUTES_ALL security_level" {"access_token":"eyJ0eXAiOiJhdCtqd3QiLCJraWQiOiItX1oteWYxNnh5Rno2a1FybVRhaFFhSG5iQjRyV2pPVC1NM2w4TWF5dWJZIiwiYWxnIjoiUlMyNTYifQ.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.As_UNADa2Ae3w1Fm3pIsY7EC7Wef_rdBMa4PrZftbdpcg5PrG1yzKcBK2V4YKbw8ZC2GBJJV0f7pe4bdUPwQaEFn7-6EnqZuRcOH6Mq5nBch9E2TX2oVIJIMiwhf5lPWjJZSOnni4yafm5wX-3D9Jg0LN_CSCd8vr53APUSFhnfffXJCx1kymXEocSc5SzEk-GDOUlD8gagOSKl7SVGfBdFsKopWrllyOfQx3D_W7245UJ1iBrEpPRxCBxSaDASJFpXm0zFwgUMAZaU_fBHXji261z1Qwe53nfElBczZjg7EpA6R5bGtWTI8QGxhRzJHtAzZ3c7WIiHcn6_ZwU7hww","expires_in":3600,"token_type":"bearer","scope":"idsc:IDS_CONNECTOR_ATTRIBUTES_ALL"}

bellebaum commented 2 years ago

Nice.