If the OP is interested in a commercial solution that will allow them to create these APIs and supports OAuth2, just reach out to me and I will gladly discuss our offering, of which I was the product owner in the past.
Brian May
Profound Logic Software
Global Customer Lifecycle Principal
http://www.profoundlogic.com<
http://www.profoundlogic.com/>
<
http://www.profoundlogic.com/>
937-439-7925 Phone
877-224-7768 Toll Free
[Profound Logic Logo]
________________________________
From: MIDRANGE-L <midrange-l-bounces@xxxxxxxxxxxxxxxxxx> on behalf of Nadir K Amra <amra@xxxxxxxxxx>
Sent: Tuesday, June 10, 2025 5:06 PM
To: Midrange Systems Technical Discussion <midrange-l@xxxxxxxxxxxxxxxxxx>
Subject: RE: OAuth2 authentication with hosted web service
Caution: This email originated from an external source. Please do not click links or open attachments unless you recognize the sender and know the content is safe.
Well, the java code can call the ILE program, no? Fairly simple given Java Toolbox. Given that Liberty is a Java stack, they only deal with Java.
However, there is nothing that precludes users from create an ILE-based web service, say to produce a JWT token, and the web service that is called could get the HTTP header value of JWT token and call an ILE program to verify it. There are a lot of ways of doing this. I am working on an article that shows an ILE web service that generates JWT tokens after getting authenticated by Basic Auth, then other web services can verify the generated token by calling program. Stay tuned.
-----------------------------------------------
Nadir Amra
e-mail: amra@xxxxxxxxxx
From: MIDRANGE-L <midrange-l-bounces@xxxxxxxxxxxxxxxxxx> on behalf of Jon Paris <jon.paris@xxxxxxxxxxxxxx>
Date: Tuesday, June 10, 2025 at 4:06 PM
To: Midrange Systems Technical Discussion <midrange-l@xxxxxxxxxxxxxxxxxx>
Subject: [EXTERNAL] Re: OAuth2 authentication with hosted web service
It's a great pity that it has to be in Java. Since IWS' role in life is to surface RPG code with Java hidden in the background, it makes no sense to me to have to write this exit code in Java. Why not allow RPG code to be called?
Jon Paris
Jon.Paris@xxxxxxxxxxxxxx
On Jun 10, 2025, at 8:29 PM, Nadir K Amra <amra@xxxxxxxxxx> wrote:
In the IWS server, you have the option to insert a trust authentication interceptor (TAI). It a piece of user-defined Java code that gets called for protected web services. In this code you have access to the HTTP request data, and you can do anything you want.
See https://www.ibm.com/support/pages/node/6396908
-----------------------------------------------
Nadir Amra
e-mail: amra@xxxxxxxxxx
From: MIDRANGE-L <midrange-l-bounces@xxxxxxxxxxxxxxxxxx> on behalf of Darren Strong <darren@xxxxxxxxx>
Date: Tuesday, June 10, 2025 at 2:09 PM
To: midrange-l General Questions (midrange-l@xxxxxxxxxxxxxxxxxx) <midrange-l@xxxxxxxxxxxxxxxxxx>
Subject: [EXTERNAL] OAuth2 authentication with hosted web service
We've been asked to setup a webservice for a vendor to call and get some data from our IBM I server. Setting up the webservice to do this was fairly straightforward, but we'd like to use more than the "Basic" authentication available (username/password) with the integrated web server wizard (IWS). Do you have any experience or links explaining if and how IBM i can support this?
--
This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing list
To post a message email: MIDRANGE-L@xxxxxxxxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: https://lists.midrange.com/mailman/listinfo/midrange-l
or email: MIDRANGE-L-request@xxxxxxxxxxxxxxxxxx
Before posting, please take a moment to review the archives
at https://archive.midrange.com/midrange-l .
Please contact support@xxxxxxxxxxxxxxxxxxxx for any subscription related questions.
--
This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing list
To post a message email: MIDRANGE-L@xxxxxxxxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit:
https://lists.midrange.com/mailman/listinfo/midrange-l
or email: MIDRANGE-L-request@xxxxxxxxxxxxxxxxxx
Before posting, please take a moment to review the archives
at
https://archive.midrange.com/midrange-l .
Please contact support@xxxxxxxxxxxxxxxxxxxx for any subscription related questions.
--
This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing list
To post a message email: MIDRANGE-L@xxxxxxxxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit:
https://lists.midrange.com/mailman/listinfo/midrange-l
or email: MIDRANGE-L-request@xxxxxxxxxxxxxxxxxx
Before posting, please take a moment to review the archives
at
https://archive.midrange.com/midrange-l.
Please contact support@xxxxxxxxxxxxxxxxxxxx for any subscription related questions.
midrange.com
