ldclakmal/wso2is-sts repository overview

⁠WSO2 IS STS

A Docker image of WSO2 IS as a STS. Supports OAuth2 token issuing and validation.

⁠Installed

1. Ubuntu 16.04
2. WSO2 IS 5.11.0

⁠Run the image

$ docker run -p 9443:9443 ldclakmal/wso2is-sts:latest

⁠Test the image

• Client credentials grant type (opaque token):

  curl -kv -u uDMwA4hKR9H3deeXxvNf4sSU0i4a:8FOUOKUQfOp47pUfJCsPA5X4clga -H "Content-Type: application/x-www-form-urlencoded;charset=UTF-8" -d "grant_type=client_credentials" https://localhost:9443/oauth2/token

• Client credentials grant type (opaque token + scopes):

  curl -kv -u uDMwA4hKR9H3deeXxvNf4sSU0i4a:8FOUOKUQfOp47pUfJCsPA5X4clga -H "Content-Type: application/x-www-form-urlencoded;charset=UTF-8" -d "grant_type=client_credentials&scope=admin" https://localhost:9443/oauth2/token

• Client credentials grant type (JWT):

  curl -kv -u I8_BIl8BxpVj1SzZm6Q49y4jFuIa:mcxB3K3hxZHn746K7vljJmmuKlEa -H "Content-Type: application/x-www-form-urlencoded;charset=UTF-8" -d "grant_type=client_credentials" https://localhost:9443/oauth2/token

• Client credentials grant type (JWT + scopes):

  curl -kv -u I8_BIl8BxpVj1SzZm6Q49y4jFuIa:mcxB3K3hxZHn746K7vljJmmuKlEa -H "Content-Type: application/x-www-form-urlencoded;charset=UTF-8" -d "grant_type=client_credentials&scope=admin" https://localhost:9443/oauth2/token

• JWT bearer grant type:

  curl -kv -u uDMwA4hKR9H3deeXxvNf4sSU0i4a:8FOUOKUQfOp47pUfJCsPA5X4clga -H "Content-Type: application/x-www-form-urlencoded;charset=UTF-8" -d "grant_type=urn:ietf:params:oauth:grant-type:jwt-bearer&assertion=<JWT>" https://localhost:9443/oauth2/token

• JWT bearer grant type (scopes):

  curl -kv -u uDMwA4hKR9H3deeXxvNf4sSU0i4a:8FOUOKUQfOp47pUfJCsPA5X4clga -H "Content-Type: application/x-www-form-urlencoded;charset=UTF-8" -d "grant_type=urn:ietf:params:oauth:grant-type:jwt-bearer&assertion=<JWT>&scope=developer" https://localhost:9443/oauth2/token

• Validate the token:

  curl -kv -u admin:admin -H 'Content-Type: application/x-www-form-urlencoded' -d "token=<ACCESS_TOKEN>" https://localhost:9443/oauth2/introspect