Re: OAuth2 authentication with hosted web service

Basically I was thinking that either a program could be specified as the TAI (which assumedly would require that IBM supply a Java stub to provide that interface. Alternatively, as a simpler solution, IBM would provide the Java call stub and give instructions on how to modify and deploy it (i.e. to change the program name) and possibly provide a sample RPG TAI to show how the interface worked. Whatever the Java TAI would have accepted as parms and what it would have returned.


Jon Paris
Jon.Paris@xxxxxxxxxxxxxx

On Jun 12, 2025, at 7:30 PM, Darren Strong <darren@xxxxxxxxx> wrote:

Thank you Nadir. Its not some kind of built in wizardy functionality, but I'll looking into the manual option you're referencing here. I'm familiar with Java at a novice level so I'll see what we can do.


-----Original Message-----
From: MIDRANGE-L <midrange-l-bounces@xxxxxxxxxxxxxxxxxx> On Behalf Of Nadir K Amra
Sent: Tuesday, June 10, 2025 3:30 PM
To: Midrange Systems Technical Discussion <midrange-l@xxxxxxxxxxxxxxxxxx>
Subject: Re: OAuth2 authentication with hosted web service

CAUTION: This email originated from outside of the organization. Do not click links or open attachments unless you recognize the sender and know the content is safe.


In the IWS server, you have the option to insert a trust authentication interceptor (TAI). It a piece of user-defined Java code that gets called for protected web services. In this code you have access to the HTTP request data, and you can do anything you want.

See https://www.ibm.com/support/pages/node/6396908

-----------------------------------------------
Nadir Amra
e-mail: amra@xxxxxxxxxx


From: MIDRANGE-L <midrange-l-bounces@xxxxxxxxxxxxxxxxxx> on behalf of Darren Strong <darren@xxxxxxxxx>
Date: Tuesday, June 10, 2025 at 2:09 PM
To: midrange-l General Questions (midrange-l@xxxxxxxxxxxxxxxxxx) <midrange-l@xxxxxxxxxxxxxxxxxx>
Subject: [EXTERNAL] OAuth2 authentication with hosted web service We've been asked to setup a webservice for a vendor to call and get some data from our IBM I server. Setting up the webservice to do this was fairly straightforward, but we'd like to use more than the "Basic" authentication available (username/password) with the integrated web server wizard (IWS). Do you have any experience or links explaining if and how IBM i can support this?


--
This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing list To post a message email: MIDRANGE-L@xxxxxxxxxxxxxxxxxx To subscribe, unsubscribe, or change list options,
visit: https://lists.midrange.com/mailman/listinfo/midrange-l
or email: MIDRANGE-L-request@xxxxxxxxxxxxxxxxxx
Before posting, please take a moment to review the archives at https://archive.midrange.com/midrange-l.

Please contact support@xxxxxxxxxxxxxxxxxxxx for any subscription related questions.

--
This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing list
To post a message email: MIDRANGE-L@xxxxxxxxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: https://lists.midrange.com/mailman/listinfo/midrange-l
or email: MIDRANGE-L-request@xxxxxxxxxxxxxxxxxx
Before posting, please take a moment to review the archives
at https://archive.midrange.com/midrange-l.

Please contact support@xxxxxxxxxxxxxxxxxxxx for any subscription related questions.