Using Postman - Revision history

Mint: /* Method 1: Use Izara frontend */

2023-01-19T06:55:32Z

Method 1: Use Izara frontend

← Older revision		Revision as of 06:55, 19 January 2023
Line 21:		Line 21:
	* Only works if frontend signin currently functioning		* Only works if frontend signin currently functioning

	web interface: https://~~d1gix48j5w3eur~~.cloudfront.net/buying		web interface: https://d1ky427yqbqz8o.cloudfront.net/buying
	# Navbar > Sign in using mock account (suggested), if you signup with new user will get default role in basicUser, that mean you NOT allow to access all functions.		# Navbar > Sign in using mock account (suggested), if you signup with new user will get default role in basicUser, that mean you NOT allow to access all functions.
	#:[[File:Screenshot from 2022-10-10 10-55-56.png]]		#:[[File:Screenshot from 2022-10-10 10-55-56.png]]

Mint at 05:57, 13 January 2023

2023-01-13T05:57:39Z

← Older revision		Revision as of 05:57, 13 January 2023
Line 1:		Line 1:
	= Connecting Postman to API Gateway =		= Connecting Postman to API Gateway =
	== Connect API to ~~Post man.~~ ==
			== Connect API to Postman ==

	# AWS API Gateway: click name of service api		# AWS API Gateway: click name of service api
	#: [[File:Screenshot from 2022-10-10 10-07-58.png]]		#: [[File:Screenshot from 2022-10-10 10-07-58.png]]
Line 13:		Line 15:
	#: [[File:Screenshot from 2022-10-10 10-46-07.png]]		#: [[File:Screenshot from 2022-10-10 10-46-07.png]]

			== Manually get Access Token ==

			=== Method 1: Use Izara frontend ===

			* Only works if frontend signin currently functioning

	~~== Access Token ==~~
	web interface: https://d1gix48j5w3eur.cloudfront.net/buying		web interface: https://d1gix48j5w3eur.cloudfront.net/buying
	# Navbar > Sign in using mock account (suggested), if you signup with new user will get default role in basicUser, that mean you NOT allow to access all functions.		# Navbar > Sign in using mock account (suggested), if you signup with new user will get default role in basicUser, that mean you NOT allow to access all functions.
Line 23:		Line 29:
	#* Session Storage > http... > access_token and copy these token to postman		#* Session Storage > http... > access_token and copy these token to postman
	#:[[File:Screenshot from 2022-10-10 10-58-56.png]]		#:[[File:Screenshot from 2022-10-10 10-58-56.png]]
	~~# Go to postman and paste token to Authorization > TYPE: Bearer Token >> [Token] ...~~
	~~#:[[File:Screenshot from 2022-10-10 11-00-12.png]]~~
	~~# For auth: UserLevel, need to send '''“targerUserId”''' in Params>Path Variables> <p>KEY: targetUserId </p><p>VALUE: <targetUserId>~~
	~~</p>~~

			=== Method 2: Use AWS Interface and Postman ===

			# go to AWS > Cognito > UserPool > App Client Settings
			# click on Laung Hosted UI for correct client app
			# sign in
			# Cognito will try to redirect and may fail, but can copy code from url:
			#: [[File:CognitoSignInUrlWithCode_2023-01-13_12-45-29.png]]
			# Postman setup new request as follows:
			#: [[File:PostmanConfigForRequestToken_2023-01-13_12-49-57.png]]
			# invoke request and should get access token
			# TTL of token will depend on setting in Cognito app, can increase so not need to do often

			=== Add Access Token to Postman requests ===

			# paste token to Authorization > TYPE: Bearer Token >> [Token] ...
			#: [[File:Screenshot from 2022-10-10 11-00-12.png]]
			# For auth: UserLevel, need to send '''“targerUserId”''' in Params > Path Variables > KEY: targetUserId, VALUE: <targetUserId>

	==~~= Email =~~==		== Default Test Seed Data email accounts ==
	Email use in web interface for get access token.		Email use in web interface for get access token.
	# '''basicUserA'''		# '''basicUserA'''
Line 44:		Line 63:
	#:Password: Abc123456!		#:Password: Abc123456!

			= Setup requests in Postman =

	~~= Test API in post man =~~		# click on workspace and choose folder and file testing
	# ~~Click~~ on workspace and choose folder and file testing		#* click Body choose raw > JSON and push your request in code block.
	#*~~Click~~ Body choose ~~rew~~> JSON and push your request in code block.		#* and send message.
	#*and send message.		#: [[File:Screenshot from 2022-10-10 11-31-23.png]]
	#:[[File:Screenshot from 2022-10-10 11-31-23.png]]		# below block show return response.
	#~~Below~~ block show return response.		#* If test api works . will show '''return response''' and status code: '''200 OK'''
	#*If test api works . will show '''return response''' and status code: '''200 OK'''		#* You can see more response see in '''cloudwatch''' in function testing.
	#*You can see more response see in '''cloudwatch''' in function testing.		#: [[File:Screenshot from 2022-10-10 11-39-07.png]]
	#:[[File:Screenshot from 2022-10-10 11-39-07.png]]


	= [[API Gateway Authorizers]] =		= [[API Gateway Authorizers]] =

Mint at 05:40, 13 January 2023

2023-01-13T05:40:16Z

← Older revision		Revision as of 05:40, 13 January 2023
Line 5:		Line 5:
	# Click stage /Test		# Click stage /Test
	#: [[File:Screenshot from 2022-10-10 10-33-30.png]]		#: [[File:Screenshot from 2022-10-10 10-33-30.png]]
	#* and click export choose ..”Export as Swagger+Postman Extensions” copy code JSON		#* and click export choose ..”Export as Swagger+Postman Extensions” copy code JSON, if Postman does not work with JSON, try YAML
	#: [[File:Screenshot from 2022-10-10 10-38-08.png]]		#: [[File:Screenshot from 2022-10-10 10-38-08.png]]
	# Go to postman and paste in import/ Raw text/ continue.		# Go to postman and paste in import/ Raw text/ continue.

Sven the Barbarian at 12:40, 10 October 2022

2022-10-10T12:40:25Z

Show changes

Mint at 08:13, 10 October 2022

2022-10-10T08:13:51Z

@@ Line 27: / Line 27: @@
 # For auth: UserLevel, need to send '''“targerUserId”''' in Params>Path Variables> <p>KEY: targetUserId </p><p>VALUE: <targetUserId>
 </p>
 === Email ===
@@ Line 64: / Line 65: @@
 ==== example reloPermission ====
+*'''AppLevel:superUser'''
 <syntaxhighlight lang="JavaScript">
+{
-   "roleIdKey":"AppLevel_this-is-uuid-role-superUserA",
+   "roleIdKey":"AppLevel_this-is-uuid-for-role-superUserA",
-   "service_resource_action":"VariantStandard_Product_AddProduct",
+   "service_resource_action":"ServiceTemplate_Config_Create",
    "permission": "accept"
+}
 </syntaxhighlight>
 ==== setting for authorizer appLevel ====
@@ Line 88: / Line 130: @@
           resultTtlInSeconds: 0
 </syntaxhighlight>
@@ Line 105: / Line 146: @@
 ==== example rolePermission ====
-* Create role permission, user can do action, can create in seed data or  run from https://us-east-2.console.aws.amazon.com/apigateway/home?region=us-east-2#/apis/rwnhg855jd/resources/y8erkk : '''RolePermissionCreateHdrApi'''
+* Create role permission, user can do action, can create in seed data or  run from
 https://us-east-2.console.aws.amazon.com/apigateway/home?region=us-east-2#/apis/rwnhg855jd/resources/y8erkk : '''RolePermissionCreateHdrApi'''
 :<syntaxhighlight lang="JavaScript">
+{
@@ Line 115: / Line 158: @@
 </syntaxhighlight>
-* Create userRoles, user have role, can create from  https://us-east-2.console.aws.amazon.com/apigateway/home?region=us-east-2#/apis/rwnhg855jd/resources/y8erkk : UserRolesCreateHdrApi
+==== example userRoles ====
 :<syntaxhighlight lang="JavaScript">
+{

Mint at 07:31, 10 October 2022

2022-10-10T07:31:33Z

← Older revision		Revision as of 07:31, 10 October 2022
Line 23:		Line 23:
	#* Session Storage > http... > access_token and copy these token to postman		#* Session Storage > http... > access_token and copy these token to postman
	#:[[File:Screenshot from 2022-10-10 10-58-56.png]]		#:[[File:Screenshot from 2022-10-10 10-58-56.png]]
	# Go to postman and paste token to Authorization > TYPE: Bearer Token >>		# Go to postman and paste token to Authorization > TYPE: Bearer Token >> [Token] ...
	[Token] ...
	#:[[File:Screenshot from 2022-10-10 11-00-12.png]]		#:[[File:Screenshot from 2022-10-10 11-00-12.png]]
	# For auth: UserLevel, need to send '''“targerUserId”''' in Params>Path Variables> <p>KEY: targetUserId </p><p>VALUE: <targetUserId>		# For auth: UserLevel, need to send '''“targerUserId”''' in Params>Path Variables> <p>KEY: targetUserId </p><p>VALUE: <targetUserId>
Line 31:		Line 30:
	=== Email ===		=== Email ===
	Email use in web interface for get access token.		Email use in web interface for get access token.
	# basicUserA		# '''basicUserA'''
	#:Email: success+basicUserTest@simulator.amazonses.com		#:Email: success+basicUserTest@simulator.amazonses.com
	#:Password: Abc123456!		#:Password: Abc123456!
	# verifiedUserA		# '''verifiedUserA'''
	#:Email: success+verifiedUserTestA@simulator.amazonses.com		#:Email: success+verifiedUserTestA@simulator.amazonses.com
	#:Password: Abc123456!		#:Password: Abc123456!
	# verifiedUserB		# '''verifiedUserB'''
	#:Email: success+verifiedUserTestB@simulator.amazonses.com		#:Email: success+verifiedUserTestB@simulator.amazonses.com
	#:Password: Abc123456!		#:Password: Abc123456!
	#superUserA		#'''superUserA'''
	#:Email: success+superUserTest@simulator.amazonses.com		#:Email: success+superUserTest@simulator.amazonses.com
	#:Password: Abc123456!		#:Password: Abc123456!

Mint at 07:28, 10 October 2022

2022-10-10T07:28:07Z

@@ Line 44: / Line 44: @@
 #:Password: Abc123456!
 =Authorizer=
@@ Line 149: / Line 140: @@
           resultTtlInSeconds: 0
 </syntaxhighlight>

Mint at 05:48, 10 October 2022

2022-10-10T05:48:04Z

← Older revision		Revision as of 05:48, 10 October 2022
Line 62:		Line 62:
	#SuperUser permissions for lower level RBAC (eg: User level or Category level RBAC permissions)TODO: so, you all need to give the role permission to user)		#SuperUser permissions for lower level RBAC (eg: User level or Category level RBAC permissions)TODO: so, you all need to give the role permission to user)

	=== ~~Allow~~ the role permission to user appLevel ===		=== allow the role permission to user appLevel ===
	*'''SuperUser'''		*'''SuperUser'''
	:can do all actions:		:can do all actions:
Line 83:		Line 83:
	</syntaxhighlight>		</syntaxhighlight>

	==~~Setting~~ for authorizer appLevel ==		==== setting for authorizer appLevel ====
	*function.yml		*function.yml
	:For LambdaFunctionHdrApi applevel		:For LambdaFunctionHdrApi applevel
Line 111:		Line 111:
	* Can administer sell offers for this user		* Can administer sell offers for this user

	=== ~~Allow~~ the role permission to user ===		=== allow the role permission to user ===
	:[[Allow the role permission to user appLevel]]		:[[Allow the role permission to user appLevel]]

Line 133:		Line 133:
	</syntaxhighlight>		</syntaxhighlight>

	==~~Setting~~ for authorizer userLevel ==		==== setting for authorizer userLevel ====
	*function.yml		*function.yml
	:For LambdaFunctionHdrApi userlevel, need to add adds targetid to api route/path		:For LambdaFunctionHdrApi userlevel, need to add adds targetid to api route/path

Mint at 05:42, 10 October 2022

2022-10-10T05:42:38Z

Mint at 05:29, 10 October 2022

2022-10-10T05:29:45Z

@@ Line 82: / Line 82: @@
+}
 </syntaxhighlight>
 == UserLevel ==
@@ Line 113: / Line 131: @@
    "roleIdKey": "UserLevel_this-is-uuid-for-user-verifiedUserA_this-is-uuid-for-user-verifiedUserB"
+}
 </syntaxhighlight>

← Older revision		Revision as of 05:42, 10 October 2022
Line 84:		Line 84:

	==Setting for authorizer appLevel ==		==Setting for authorizer appLevel ==
	#function.yml		*function.yml
	:For LambdaFunctionHdrApi applevel		:For LambdaFunctionHdrApi applevel
	<syntaxhighlight lang="JavaScript">		<syntaxhighlight lang="JavaScript">
Line 115:		Line 115:

	==== example rolePermission ====		==== example rolePermission ====
	# Create role permission, user can do action, can create in seed data or run from https://us-east-2.console.aws.amazon.com/apigateway/home?region=us-east-2#/apis/rwnhg855jd/resources/y8erkk : '''RolePermissionCreateHdrApi'''		* Create role permission, user can do action, can create in seed data or run from https://us-east-2.console.aws.amazon.com/apigateway/home?region=us-east-2#/apis/rwnhg855jd/resources/y8erkk : '''RolePermissionCreateHdrApi'''

	<syntaxhighlight lang="JavaScript">		:<syntaxhighlight lang="JavaScript">
	{		{
	"roleIdKey":"UserLevel_this-is-uuid-for-role-verifiedUserA_this-is-uuid-for-role-verifiedUserB",		"roleIdKey":"UserLevel_this-is-uuid-for-role-verifiedUserA_this-is-uuid-for-role-verifiedUserB",
Line 125:		Line 125:
	</syntaxhighlight>		</syntaxhighlight>

	# Create userRoles, user have role, can create from https://us-east-2.console.aws.amazon.com/apigateway/home?region=us-east-2#/apis/rwnhg855jd/resources/y8erkk : UserRolesCreateHdrApi		* Create userRoles, user have role, can create from https://us-east-2.console.aws.amazon.com/apigateway/home?region=us-east-2#/apis/rwnhg855jd/resources/y8erkk : UserRolesCreateHdrApi
	<syntaxhighlight lang="JavaScript">		:<syntaxhighlight lang="JavaScript">
	{		{
	"userId": "this-is-uuid-for-user-verifiedUserB",		"userId": "this-is-uuid-for-user-verifiedUserB",
Line 134:		Line 134:

	==Setting for authorizer userLevel ==		==Setting for authorizer userLevel ==
	#function.yml		*function.yml
	For LambdaFunctionHdrApi userlevel, need to add adds targetid to api route/path		:For LambdaFunctionHdrApi userlevel, need to add adds targetid to api route/path

	<syntaxhighlight lang="JavaScript">		<syntaxhighlight lang="JavaScript">