{"id":3264,"date":"2025-12-14T15:50:13","date_gmt":"2025-12-14T14:50:13","guid":{"rendered":"https:\/\/france.magicsoftware.com\/blog\/?p=3264"},"modified":"2025-12-30T16:12:53","modified_gmt":"2025-12-30T15:12:53","slug":"amazon-cognito-magic-xpi","status":"publish","type":"post","link":"https:\/\/france.magicsoftware.com\/blog\/magic-xpi\/amazon-cognito-magic-xpi\/","title":{"rendered":"Amazon Cognito – Magic xpi"},"content":{"rendered":"\n

Goal : Configure OAuth2 Authentication for Magic xpi RESTful API Service using Amazon Cognito<\/strong><\/p>\n\n\n\n

1\/ Sign on your AWS portal and create a user pool in Cognito<\/p>\n\n\n\n

\"\"<\/figure>\n\n\n\n

In this user pool, create an application client (MagicxpiAPP)<\/p>\n\n\n\n

\"\"<\/figure>\n\n\n\n

Copy the client id and client secret<\/p>\n\n\n\n

\"\"<\/figure>\n\n\n\n

Return to user pool level and click on Domain<\/p>\n\n\n\n

\"\"<\/figure>\n\n\n\n

Scroll down and Create a resource server<\/p>\n\n\n\n

\"\"<\/figure>\n\n\n\n

Create a scope inside this resource server<\/p>\n\n\n\n

\"\"<\/figure>\n\n\n\n

Return to App clients level, scroll down and copy the information to get an access token from aws Cognito<\/p>\n\n\n\n

\"\"<\/figure>\n\n\n\n

2\/ Check with Postman that you can get an access token like below<\/p>\n\n\n\n

make a POST on your token URL and pass in the body (clientid, client secret, grant type and scope) using an urlencoded format<\/p>\n\n\n\n

use the information from the previous step.<\/p>\n\n\n\n

\"\"<\/figure>\n\n\n\n

3\/ Check in the token that you get the scope<\/strong> and the iss<\/strong> (issuer)<\/p>\n\n\n\n

You can use the website : https:\/\/www.jwt.io (copy and paste the bearer token)<\/p>\n\n\n\n

\"\"<\/figure>\n\n\n\n

4\/ Create an xpi project and create a RESTFul API service like below<\/p>\n\n\n\n

(*) In my example, i use 6443 for the apache\/tomcat port (can be change in the server.xml file in the apache conf directory)<\/p>\n\n\n\n

Set the Security to OAuth2<\/strong><\/p>\n\n\n\n

Create GetTime path.<\/p>\n\n\n\n

\"\"<\/figure>\n\n\n\n

5\/ Create a new flow and use a RESTFul API connector in the trigger area<\/p>\n\n\n\n

\"\"<\/figure>\n\n\n\n

In the last step of your flow, add a Flow Data to update C.UserBlob variable with a simple json containing the time (‘{\u00ab\u00a0time\u00a0\u00bb:\u00a0\u00bb‘&TStr (Time (),’HH:MM:SS’)&'\u00a0\u00bb}’) and C.UserCode with 201.<\/p>\n\n\n\n

6\/ Open the XML service definition file of your RESTFul service under your project directory<\/p>\n\n\n\n

(ex : <Magicxpi installation directory>Runtime\\projects\\OAuth2_Keycloak\\OAuth2_Keycloak\\RESTful API\\MyRESTfulAPI)<\/p>\n\n\n\n

\"\"<\/figure>\n\n\n\n

Add the oauth2 resource server in the securityDefinitions<\/strong><\/p>\n\n\n\n

Use the iss value from the token (step 3) for the issuerUri<\/p>\n\n\n\n

Add the security role (\u00ab\u00a0default-m2m-resource-server-m5jgoo\/read\u00a0\u00bb) (step 3) for the path you want to protect<\/strong><\/p>\n\n\n\n

\"\"<\/figure>\n\n\n\n

7\/ Copy the war file (xpiREST.war) from your installation directory (ex: <Magicxpi installation directory>\\Runtime\\addon_connectors\\RESTfulAPI\\servicefiles to your webapps apache directory (ex: <Magicxpi installation directory>\\Runtime\\apache-tomcat\\webapps)<\/p>\n\n\n\n

!! Use the last version of the war file<\/strong> (you can get it from the Magic support)<\/p>\n\n\n\n

8\/ Start your apache server (startup.bat) from your apache directory (ex : <Magicxpi installation directory>\\Runtime\\apache-tomcat\\bin) using command line (Admin mode)<\/p>\n\n\n\n

You should see the xpiREST folder created.<\/p>\n\n\n\n

\"\"<\/figure>\n\n\n\n

9\/ Copy the service definition file from step6 to directory \u00ab\u00a0rest-services\u00a0\u00bb of your apache\/tomcat <\/p>\n\n\n\n

\"\"<\/figure>\n\n\n\n

10\/ Start your magic xpi project<\/p>\n\n\n\n

11\/ Use Postman to call Magic xpi service and use the bearer token you got from step 2\/ <\/p>\n\n\n\n

Set the Authorization header with the Bearer token<\/p>\n\n\n\n

\"\"<\/figure>\n\n\n\n

You should receive status 201 with the time value in a json format.<\/p>\n\n\n\n

12\/ Set a wrong role in the service definition file in your apache directory<\/p>\n\n\n\n

\"\"<\/figure>\n\n\n\n

If you call again the service, you should get error status 403 Forbidden<\/p>\n\n\n\n

\"\"<\/figure>\n\n\n\n

<\/p>\n","protected":false},"excerpt":{"rendered":"

Goal : Configure OAuth2 Authentication for Magic xpi RESTful API Service using Amazon Cognito 1\/ Sign on your AWS portal and create a user pool in Cognito In this user pool, create an application client (MagicxpiAPP) Copy the client id and client secret Return to user pool level and click on Domain Scroll down and […]<\/p>\n","protected":false},"author":1,"featured_media":3265,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"site-sidebar-layout":"default","site-content-layout":"","ast-site-content-layout":"default","site-content-style":"default","site-sidebar-style":"default","ast-global-header-display":"","ast-banner-title-visibility":"","ast-main-header-display":"","ast-hfb-above-header-display":"","ast-hfb-below-header-display":"","ast-hfb-mobile-header-display":"","site-post-title":"","ast-breadcrumbs-content":"","ast-featured-img":"","footer-sml-layout":"","ast-disable-related-posts":"","theme-transparent-header-meta":"","adv-header-id-meta":"","stick-header-meta":"","header-above-stick-meta":"","header-main-stick-meta":"","header-below-stick-meta":"","astra-migrate-meta-layouts":"default","ast-page-background-enabled":"default","ast-page-background-meta":{"desktop":{"background-color":"var(--ast-global-color-4)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"tablet":{"background-color":"","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"mobile":{"background-color":"","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""}},"ast-content-background-meta":{"desktop":{"background-color":"var(--ast-global-color-5)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"tablet":{"background-color":"var(--ast-global-color-5)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"mobile":{"background-color":"var(--ast-global-color-5)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""}},"footnotes":""},"categories":[35,92,4,27],"tags":[11,14],"class_list":["post-3264","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-magic-xpi-magic-xpi","category-cognito","category-magic-xpi","category-oauth2","tag-azure","tag-magic-xpi"],"aioseo_notices":[],"jetpack_featured_media_url":"https:\/\/france.magicsoftware.com\/blog\/wp-content\/uploads\/2025\/12\/AWS_Cognito_MG1.png","_links":{"self":[{"href":"https:\/\/france.magicsoftware.com\/blog\/wp-json\/wp\/v2\/posts\/3264","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/france.magicsoftware.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/france.magicsoftware.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/france.magicsoftware.com\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/france.magicsoftware.com\/blog\/wp-json\/wp\/v2\/comments?post=3264"}],"version-history":[{"count":21,"href":"https:\/\/france.magicsoftware.com\/blog\/wp-json\/wp\/v2\/posts\/3264\/revisions"}],"predecessor-version":[{"id":3358,"href":"https:\/\/france.magicsoftware.com\/blog\/wp-json\/wp\/v2\/posts\/3264\/revisions\/3358"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/france.magicsoftware.com\/blog\/wp-json\/wp\/v2\/media\/3265"}],"wp:attachment":[{"href":"https:\/\/france.magicsoftware.com\/blog\/wp-json\/wp\/v2\/media?parent=3264"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/france.magicsoftware.com\/blog\/wp-json\/wp\/v2\/categories?post=3264"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/france.magicsoftware.com\/blog\/wp-json\/wp\/v2\/tags?post=3264"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}