Newer
Older
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
# Postman
In this section we can use Postman to publish an API as a provider and use it as an invoker.
## Requisites
- We will need to have Node.js installed since we will use a small script to create the CSRs of the certificates.
- An instance of CAPIF (If it is not local, certain variables would have to be modified both in the Node.js script and in the Postman environment variables).
## First steps
1. Install the Node dependencies <a href="./package.json" download>package.json</a> to run the script with:
```
npm i
```
1. Run the <a href="./script.js" download>script.js</a> with the following command:
```
node script.js
```
3. Import Postman collection and environment variables (<a href="./CAPIF.postman_collection.json" download>CAPIF.postman_collection.json</a> and <a href="./CAPIF.postman_environment.json" download>CAPIF.postman_environment.json</a>)
4. Select CAPIF Environment before start testing.
## Remote CAPIF
If the CAPIF is not local, the host and port of both the CAPIF and the register would have to be specified in the variables, and the CAPIF_HOSTNAME in the script, necessary to obtain the server certificate.
**Enviroments in Postman**
```
CAPIF_HOSTNAME capifcore
CAPIF_PORT 8080
REGISTER_HOSTNAME register
REGISTER_PORT 8084
```
**Const in script.js**
```
CAPIF_HOSTNAME capifcore
```
## CAPIF Flows
Once the first steps have been taken, we can now use Postman requests. These requests are numbered in the order that must be followed to obtain everything necessary from CAPIF.
### Publication of an API
#### **01-register_user_provider**
_AEF.png)
#### **02-getauth_provider**
#### **03-onboard_provider**
At this point we move on to using certificate authentication in CAPIF. In Postman it is necessary to add the certificates manually and using more than one certificate for the same host as we do in CAPIF complicates things. For this reason, we use the script to overwrite a certificate and a key when it is necessary to have a specific one.
To configure go to **settings** in Postman and open the **certificates** section.
- Here, activate the **CA certificates** option and add the **ca_cert.pem** file found in the **Responses** folder.
- Adds a client certificate specifying the CAPIF host being used and the files **client_cert.crt** and **client_key.key** in the **Responses** folder.
Once this is done, the node script will be in charge of changing the certificate that is necessary in each request.
#### **04-publish_api**
Once the api is published, we can start it. In this case we have a test one created in python called <a href="./hello_api.py" download>hello_api.py</a> that can be executed with the following command:
```
python3 hello_api.py
```
The API publication interface is set to localhost with port 8088, so the service must be set up locally. If you wanted to build it on another site, you would have to change the interface description in the body of publish_api.
With this the provider part would be finished.
### Calling the API
#### **05-register_user_invoker**
_Register.png)
#### **06-getauth_invoker**
#### **07-onboard_invoker**
At this point we move on to using certificate authentication in CAPIF. **If you did not configure the provider's certificates, you would have to do it now**.
#### **08-discover**
#### **09-security_context**
#### **10-get_token**
#### **11-call_service**
With this, we would have made the API call and finished the flow.
### Other requests
Other requests that we have added are the following:
- **offboard_provider** Performs offboarding of the provider, thereby eliminating the published APIs.
- **offboard_invoker** Offboards the invoker, also eliminating access to the APIs of that invoker.
- **remove_user_invoker** Delete the user created for the invoker.
- **remove_user_provider** Delete the user created for the provider.
## Notes
- This process is designed to teach how requests are made in Postman and the flow that should be followed to publish and use an API.
- It is possible that if external CAPIFs are used (Public CAPIF) the test data may already be used or the API already registered.
- It is necessary to have the Node service running to make the certificate change for the requests, otherwise it will not work.
- We are working on adding more requests to the Postman collection.
- This collection is a testing guide and is recommended for testing purposes only.