ISC Oauth2 token : attribut "internal"

Identity Security Cloud (ISC) ISC Discussion and Questions
,
1

Hello,

Someone already used new private API used by the ISC’s front ? :disguised_face:

I can see them via DevTools during my web using of ISC, but i want to understand how to generate secret like on the front, to use it during script.

Token generated via web :

{
  "alg": "HS256",
  "typ": "JWT"
}.{
  "tenant_id": 🧹,
  "internal": true,
  "pod": "stg03-eucentral1",
  "org": 🧹,
  "identity_id": 🧹,
  "user_name": 🧹,
  "strong_auth": true,
  "force_auth_supported": false,
  "authorities": [
    "ORG_ADMIN",
    "sp:user"
  ],
  "refresh_token_rotation_supported": false,
  "client_id": "sp-renderer",
  "federated": true,
  "strong_auth_supported": false,
  "claims_supported": false,
  "scope": [
    "Ag=="
  ],
  "exp": 1738577775,
}.[Signature]

Token generated usually during my script via /oauth/token url :

{
  "alg": "HS256",
  "typ": "JWT"
}.{
  "tenant_id": 🧹,
  "pod": "stg03-eucentral1",
  "strong_auth_supported": false,
  "org": 🧹,
  "identity_id": 🧹,
  "user_name": 🧹,
  "scope": [
    "Bg=="
  ],
  "strong_auth": true,
  "exp": 1738620331,
  "authorities": [
    "ORG_ADMIN",
    "sp:user"
  ],
  "client_id": 🧹
}.[Signature]

I tried to understand how token is been generated during user connexion but I think magic is made through .js (app-shell.js), and I don’t know how to debug this part (code i minified furthermore).

If someone already check this part or have tips, thank you,

Thomas

2

This topic was automatically closed 60 days after the last reply. New replies are no longer allowed.