OAuth Part 2 Demo | Configure with Auth 0 | JWT Policy | JWKS | Restrict client access

[@ramugudi5418]

Hi Vishwas, Great video and nice explanation and got everything correct while doing practice. Thank you so much for the video. Ram🙂

[@cesarrodriguezcalderon5274]

Very well explained, I got stuck trying to create the client with client_id and client_secret from auth0 (min 29), but finally I saw the solution in the description, beyond that everything perfect!

[@varunteja8]

Hi Vishwas If facing below issues while creating application through postman { "name": "InvalidTokenError", "message": "Missing token" }

[@pragun1993]

Hi Vishwas, nice video. Isn't it wrong at 24:21 to say that you have configure it for Demo-JWT and not for Demo-API. Because till this point both are valid apps registered in Auth0 and there is nothing specifically configured in API Manager that will allow one app and block other. But since you turned on client validations, and there is no registered client application in Mule, both the apps throw an error which is what we would expect.

[@Vishwasp13]

Hi Pragun, Thanks for pointing out, yes you are correct. Both are valid apps and its not specifically configured for any application until it was registered with Anypoint Platform.

[@pragun1993]

@@Vishwasp13 Thank you for a prompt reply!

[@mayuria2447]

How many ways to generate access token

[@maramreddysreekanth2413]

at 29.11vishwas you explain how to get organization id, explain what to put in body but didnt mention what to put in authorization it is showing green dot something you added there .i put jwt token i am getting this error. { "name": "CoreServicesError", "title": "CoreServices error", "upstream": { "trxId": "10cc0b27-3e7b-4eca-b8fa-cc184d60deec", "message": "No key by that key_id", "statusCode": 404, "statusDescription": "Not Found" }, "message": "There was an error while talking to Access Management (trx id 10cc0b27-3e7b-4eca-b8fa-cc184d60deec) Error: No key by that key_id Not Found (404)" }

[@shekarm8631]

@ vishwas pawar. After getting access token from anypoint I trying to create client application,but it's giving { name: AuthenticationError, Message:unathenticated } Am unable to get this please let me know

[@andyrussel9093]

@vishwas pawar- I am also getting the same error .

[@prateekdegaon2853]

is JWKS endpoint is manadatory to get public key to validate jwt signature? or its okayt to share the public key directly and client can validate jwt using that? I dont see in any RFC which says JWKS is mandatoy to get public kkeys(public cert)

[@mayuria2447]

Sir can we know the exact difference between jwt and oAuth 2.0 on what cases we go for oauth on what cases we go for jwt

[@paramitadas4390]

While creating the client application I am getting error from postman: { "name": "BadRequestError", "message": "A target apiVersionId or groupInstanceId is required to create an application" }

[@Vishwasp13]

Appears to be a problem with the URL that you might be using, consider re cross checking with the URL used in the video.

[@mayuria2447]

Can you please do a video on how many ways to create oauth2.0 policy in mulesoft this topic very vast and confusing also