How to get access token dynamically using code

Product Forums Katalon Studio
,
1

Hi, Am doing API Testing, using Outh2 authorization, my company using identity service which doesnt have any API who can give me access token.

How can I get access token using the groovy script.

2

any suggestion?

3

The authorization code grant is used when an application exchanges an authorization code for an access token. After the user returns to the application via the redirect URL, the application will get the authorization code from the URL and use it to request an access token.

4

Many thanks… Let me ask bit in detail my question:
It is very simple question, Right now i am using Postman and getting the token manually

image
image631Ă—600 12.5 KB

I want to use Katalon OAuth2 functionality and generate token via code.
possible?

5

any suggestion

6

Please help…

7

Hi @gopabandhu.patra,
What Grant Type do you want to use?

8

It is “Implicit”

9

Hi @gopabandhu.patra,
Getting access token for implicit grant type is a little bit tedious, and involves Web UI testing. Is it feasible from your side to use another grant type, such as Password credentials?

10

Am checking for Password credential Grant type… Please recommend how can i automate if my developer will provide me

11

image
image800Ă—337 11.2 KB

Hello My developer denied to change the Grant type except Implicit due to security reason.
I am using above code to get the Token value from the excell sheet (where i am getting token using postman tool and storing in excel), before executing my test suite, i update the token and using it for authentication.
I hope the steps are correct or do we have any inbuild jar file available so that i can use it and get the token dynamically if Grant type is Implicit.

12

Hi @gopabandhu.patra,
Your solution is acceptable as long as you don’t mind manually getting the access token and storing it for Katalon retrieval every time you execute your test suite. For a more dynamic solution, please refer to the sample project attached for how to get the access token without manual intervention. Of course, you have to fine-tune the project to suite your needs, and you have to accept some automation code that involves Web UI testing.OAuth2_Implicit_1.zip (48.6 KB)

13

Dear Huynguyen, I have a problem that my redirect URL where token present is a transit URL basically. After entering user name and password, it is successfully loging in and redirecting a different URL. However, I can see in transit from Username password page to successful login page the URL is having token information.
How can i capture transit URL?.

14

Hi @gopabandhu.patra,
Have you tried WebUI.getUrl()?

15

YES…already but transit URL, unable to capture… It is just capturing the last redirect URL.

16

Hi @gopabandhu.patra,
Can you share with us the transit URL?

17

https://qamyevents.XXX.com/callback#access_token=eyJhbGciOiJSUzI1NiIsImtpZCI6Ijc3Q0EwNDJBRUIzOTIzRTA3QTUyNzI0MEFCQTlFQkVCMTY2N0YzNUIiLCJ0eXAiOiJKV1QiLCJ4NXQiOiJkOG9FS3VzNUktQjZVbkpBcTZucjZ4Wm44MXMifQ.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.oLobwLXq6-tgdHCkmT9m_89JHsKKi2pLasDjRHx3-dYKGlXso7jkFQiIf3QfSAxNmpTPwcbxURDNTDSxCNqZep2RGUQ-Wktjhr5CogTjCXoNeD9jcLHiQtBdDUtCQgSoB57tlOx3gQNw7dLCUaJIcP0mxN7ykVocmkBy5vHgXlns5yZ3Sr6xdzwz5Es3VuuNk3c9yRv43XFJjC8tWhXwtSOOf4C0qFBINBSd80Ohcf_XKah5cgfPuAh4SJUiCHbAlabCfiUGedztckoH5q_Li3U63cOAJK9DDRzsKwsPW_gsT7Ay3r83iB-zduP1uEqFepKX2o9_Cc58VrmR9t8lRA&token_type=Bearer&expires_in=1800&scope=myfileapi%20myeventsapiweb

18

I have added XXX which is company name…

19

And the last redirect url doesn’t have the access token?

20

YES…Last URL doesnt have access token