Hi,
I am unable to access Admin Portal of Garden. I have set up my Test Environment and Garden Credentials. But, unable to find admin portal of Garden in which we can configure API Scope and Claims.
We do not provide access to the Garden admin/back office.
If you need additional (protected) claims - please provide your external application Client ID and the requested claims (OpenID Connect and OAuth 2.0 | Banno SDK | Jack Henry Docs) and scopes.
Thank you for the reply.
Here is my external Application Client ID: 80a4ac49-b2ab-4c3f-8af3-cbcae50585eb.
Here is the List of Claims and Scopes I am looking for:
Claims:
accounts
cards
customer_identifier
Scopes:
openid
address
email
phone
profile
Thank you
You should be good to go!
Hi,
Thank you for the configuration.
I tried to get below Claims information through Scope, but it gives me forbidden error:
accounts
cards
customer_identifier
FYI, I am adding below scope in my API Call:
Please let me know if above is correct OR should I need to add something else in Scope Parameter while doing API Call ?
Thank you
Could you share more details? x-request-id would be good to investigate
I am following below step:
Step-1: Get Authorization Code
https://digital.garden-fi.com/a/consumer/api/v0/oidc/auth?scope=openid profile
&state=a12345
&code_challenge=C_WDKQfKC5UC2jW_o1IXJn_gWLItbQ2lUVQjhfp-yzw
&code_challenge_method=S256&client_id=80a4ac49-b2ab-4c3f-8af3-cbcae50585eb
&redirect_uri=https://pstmn.io
&response_type=code
Step-2: POST to get access token
FYI,
I am following URL to generate Authorization Code and Access Token.
Authentication (Command Line) | Banno SDK | Jack Henry Docs
Thank you
Hi samcouch,
Any update ?
Thank you
If you are getting a 403 - could you share an x-request-id for that?
Here it is:
x-request-id: c3ed07927abe2deffd0b35a27b7ce8e1
Thank you
The 403 is caused by a missing OAuth scope in your Step 1 authorization request. Your current `scope` parameter only requests:
openid profile
However, the `/v0/users/*/accounts` endpoint requires at least one of these additional scopes:
https://api.banno.com/consumer/auth/accounts.readonly
https://api.banno.com/consumer/auth/accounts.readwrite
Because those scopes weren’t requested during authorization, the token you received doesn’t include permission to access account data, and the API gateway rejects the call with a 403.
To fix this, update your Step 1 authorization URL to include the accounts scope
Thank you for the information.
I have updated my authorization code request as above. Still I am getting 403 forbidden error and also Jason Web Token does not shows “https://api.banno.com/consumer/auth/accounts.readonly” within scope even though it is mentioned in request.
Is there anything else I am missing ?
Thank you
Do you have an updated x-request-id for this?
Here is the updated details:
Step 1: Get Authorization Code
x-request-id: b68d98bb112486279128735d84bb6390
Step 2: Get Token
x-request-id: 25ae0c7a72ba72f9f588e96b4c185052
Also, I can’t run the step 1 in Postman.
I have to run that in browser, enter Garden Credentials and then I get the code.
I am not sure if I am missing anything in order to run step 1 in Postman.
Thank you
You should be good now - that scope has been added
Yeah… It’s working now!
Thank you for that!
Also, it would be great if you can help of my other query. Here I am adding that again:
I can’t run the step 1 in Postman.
I have to run that in browser, enter Garden Credentials and then I get the code.
I am not sure if I am missing anything in order to run step 1 in Postman.
Thank you again. I appreciate that…
I’m not well versed with Postman enough to know how to properly define auth.