Inji Certify - local setup

Vijai_Shree_S · October 23, 2024, 9:44am

Hello all, We have been trying to do a setup of inji certify for mock credential use case. We receive a pkce_failed error when hitting the end point “v2/token” while using a ‘code’ generated via curl commands. While using a ‘code’ generated via postman we are able to get results. Bellow is the link to the shell script:

github.com

VijaiShreeSeenivasagan/mosip/blob/release-0.9.x/docker-compose/mockUseCase.sh


get_csrf_token(){
  curl --location 'http://localhost:8088/v1/esignet/csrf/token' \
  --header 'Cookie: XSRF-TOKEN=12462981-e4d9-49cd-a94f-1ec41ffa8f1d' \
  -o ../../postman_responses/csrfToken.json

  echo $(jq -r '.token' ../../postman_responses/csrfToken.json)
}

create_oidc_client(){
#  length=${1:-32}
#  codeVerifier=$(tr -dc 'A-Za-z0-9' </dev/urandom | head -c "$length")
#  codeChallenge=$(echo -n "$codeVerifier" | openssl dgst -sha256 -binary | base64 | tr -d '=' | tr '+/' '-_' | tr -d '\n')

  codeVerifier=$(openssl rand -base64 60 | tr -d "\n" | tr '/+' '_-' | tr -d '=')
  codeChallenge=$(printf $code_verifier | shasum -a 256 | head -c 64 | xxd -r -p - | openssl base64 | tr '/+' '_-' | tr -d '=')

  codeChallengeMethod="S256"

  #redirectionUrl=$(jq -r '.values[] | select(.key == "redirectionUrl") | .value' inji-certify-with-mock-identity.postman_environment.json)

This file has been truncated. show original

Anusha_sunkadh · October 25, 2024, 6:48am

@Vijai_Shree_S Please ignore the above-proposed change, noticed that I was using echo -n option in some steps.

However I was not able to reproduce PKCE error with latest version of esignet. May I know the eSignet version used?

Vijai_Shree_S · October 25, 2024, 8:43am

we used esignet 1.4.0

MohamedHumair_Kankud · December 9, 2024, 7:10am

Hello @Vijai_Shree_S ,
we have generated the code verifier and code challenge using the given script with eSignet 1.4.0 version and we are able to get the required response. Hence attaching the screenshots for the reference. Thank you

Vijai_Shree_S · December 9, 2024, 7:54am

Thanks for it @MohamedHumair_Kankud , we were able to get it using postman but when tried with command line we were not abled to. i will check with it again as well. Could you please confirm if you are able to get the token using command line as well.

MohamedHumair_Kankud · December 9, 2024, 10:20am

Yes @Vijai_Shree_S , we tried with postman but the code challenge and code verifier are generated from the same script which you have shared. Hence in my humble opinion it should work in both the case. Thanks!

Vijai_Shree_S · December 9, 2024, 10:32am

Thank you so much @MohamedHumair_Kankud , will look into it

Topic		Replies	Views
Inji Verify local setup Inji	15	186	July 9, 2024
Release Announcement: Inji Certify v0.8.1! Release announcement , inji	1	93	May 17, 2024
Inji verify installation issue Developer	2	45	July 25, 2024
Questions on setting up test environment for esignet & mosip Support	9	194	August 19, 2024
Inji Web local setup	5	101	July 22, 2024

Inji Certify - local setup

Related topics