Using OAuth 2.0 Tokens from the Authentication Server
Copy
The Authentication Server enables requesting an OAuth 2.0 token from the server to use as basic authentication. The information in this chapter has been adapted from the “Authenticating in OAuth 2.0 with Aras RESTful API” blog.
From Aras Innovator 14+ versions, 0Auth 2.0 tokens are used for token authentication.
In this document, Postman is used, although the same request can be sent using any API platform.
The following steps outline the process of getting the access token:
Download the Postman application on the local machine.
Under My Workspace, select Collections and click Create New Collection.
Provide a name for the new Workspace—for example, 14+ AuthServer Requests.
Select the Authorization tab.
For the Type field, select OAuth 2.0 from the dropdown.
Scroll down to Configure New Token section and set the configuration options as follows:
| Field | Value |
| Token Name | Name of the Token |
| Grant Type | Authorization Code (With PKCE) |
| Callback URL | http://<servername>/<web alias>/Client/OAuth/PopupCallback |
| Auth URL | http://<servername>/<web alias>/oauthserver/connect/authorize |
| Access Token URL | http://<servername>/<web alias>/oauthserver/connect/token |
| Client ID | InnovatorClient |
| Scope | openid Innovator offline_access |
Click Get New Access Token.
Log into the popup Aras Innovator window with your credentials.
In the Get new access token dialog box, click Proceed.
In the Manage Access Token dialog box, click Use Token.
Click Save to save the changes.
The following steps outline the process of confirming the Token Authentication:
On the newly created workspace, click Add a request.
Enter the name of the request. For example, Part Request.
Select the Authorization tab and select Inherit auth from parent in the Type drop-down.
To confirm token authentication, run a simple query to get all the Part data from the Aras Innovator.
Select the GET request and enter the following request URL.
URL: http://
Click Send to run the request.
The request returns the JSON with all the parts within the database as follows:
This confirms that the token authentication and Innovator server connection was successful.