API Web-app type, authentication issue

franckdanard · February 18, 2024, 8:29am

Hi

I’m trying to setting up a Web-App to handle some API Gql.
Ussing Web-App mode, I’m basing on this part of document.

Just trying this way bellow:

I just replaced the authorization server with http://my_freepbx_erver:83/admin/api/api/authorize
But unable to authenticate.

It returns


error	invalid_client
message	Client authentication failed

Same result with Single Page (and not secure, so it’s not a good way)

I wondered if somebody else used a web-app mode successully.

That works correctly with machine to machine, but the goal is avoid to store the client_secret on the remote server calling the FreePBX server.

If someone can help me please.
Or maybe it’s a bug.
There is no document on FreePBX help to put us on rails.

franckdanard · February 23, 2024, 8:02am

github.com/FreePBX/issue-tracker

[bug]: API Authorize URI doesn't work.

opened 08:09AM - 21 Feb 24 UTC

danardf

bug triage

### FreePBX Version FreePBX 16 ### Issue Description When an API is created, …there is no owner created in the api_applications table. For this reason, if someone need to use authorize URI, the is no association between the username and the client_id. I forced the owner putting username id, it doesn't work anyway. I think something is missing with this logic. I imagine if the admin create a web-app or a single page API, then it should get a list box with the users to be associate with the client_id. For now, the FreePBX server cannot return any token with the client_id, client_secret, code ...etc I used this document bellow trying the web-app and single-page method, no way. https://aaronparecki.com/oauth-2-simplified/#web-server-apps I think samgoma should write a document giving some examples with the authorize URI usage once fixed. Here, the link in the FreePBX forum relating this issue. https://community.freepbx.org/t/api-web-app-type-authentication-issue/94633 However, machine to machine works fine, but it's not safe to use any remote applications for managing any FreePBX / PBXact systems. ### Operating Environment framework: 16.0.40.7 api: 16.0.13 ### Relevant log output ```shell {"error":"invalid_client","message":"Client authentication failed"} ```

system · March 25, 2024, 8:02am

This topic was automatically closed 31 days after the last reply. New replies are no longer allowed.