Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

WSO2 Identity Server provides a SOAP service to validate the OAuth2 token it has issued which can be used by the resource server. This section guides you through calling the SOAP service using the SOAP UI. 

Info

The relevant code segment in the

...

sample

...

webapp WSO2 playground2

...

 for OAuth2 can be

...

found here.

Following steps provides the guidance on calling the service using SOAP UI.

  1. Make admin services WSDL accessible.Open the file wso2is-5.1.0

    Open the <IS_HOME>/repository/conf/carbon.xml

    Configure "HideAdminServiceWSDLs" property to false. (

     file and set the <HideAdminServiceWSDLs> property to false. 

    Note

    Note: This step is just to make

    get

    the

    service

    admin services WSDL accessible. Once the service WSDL is taken

    make sure to

    , revert this change to hide admin service WSDLs

    )

    Code Block
    languagetext
    <!-- If this parameter is set, the ?wsdl on an admin service will not give the admin service wsdl. -->
            <HideAdminServiceWSDLs>true</HideAdminServiceWSDLs>
  2. Restart the serverto  make the change server to make the changes effective.
  3. Go to the SOAP UI and give the WSDL location.
    1. Service Name: OAuth2TokenValidationService 

    2. WSDL location: https://localhost:9443/services/OAuth2TokenValidationService?wsdl

  4. Provide the following parameters to call the validate method as seen below.Image Modified
    1. Since this validation service is an admin service, a valid user name and password needs to be provided in order to consume the service.
    2. Identifier value is the token to be validated. 
    3. If the user claims are also required while validating the access token, a list of claim URIs can be provided as well.
    4. The response will
  1. provide
    1. contain details on the authorized user for the token,
  2. if
    1. whether the token is valid and how many more seconds for which the token is valid. If
  3. there was
    1. an error occurred while validating the token, it can be sent as the error message.
  4.  
Panel
titleRelated Topics
  • In order to get the user claims of the authorized user as a JWT token with the validation response, see JWT Token Generation.