@MOHANRAJS7274

Question # 1:

• You’ll need to make a POST request to Pega’s token endpoint using the client_id and client_secret

POST /PRRestService/oauth2/v1/token --> You can find this end point in your OAuth 2.0 Client Registration Rule where you have generated the client ID and Client Secret. 

Below is the Curl command for OAuth-

curl -X POST https://<your-pega-host>/PRRestService/oauth2/v1/token \   -H "Content-Type: application/x-www-form-urlencoded" \   -d "grant_type=client_credentials&client_id=YOUR_CLIENT_ID&client_secret=YOUR_CLIENT_SECRET"  

In the response you would receive the access_token, token_type and expiration time (in seconds). 

•  Use the token obtained above to include an Authorisation Header in your DX API call-

GET /api/application/v2/cases Host: <your-pega-host> Authorization: Bearer <access_token>

Pls refer to the below article for implementing OAuth:

https://auth0.com/docs/secure/tokens/access-tokens/get-access-tokens

Question #2:

• The /api/application/v2/cases endpoint is compatible with Theme Cosmos apps.
• However, if you want to use /api/v1/cases, the authorization for v1 traditional APIs are configured to 'Basic' (refer to the 'api' service package). Hence you'd need to pass the username and password in the Authorisation header while calling v1 APIs. 

Tip: You can change the authorisation method of the 'api' service package to 'OAuth' for enhanced security. However be mindful that if there are any existing systems that are already using Traditional API should also change their authorisation method to OAuth. You can use the OAuth Client Registration that you might have already created for Traditional APIs as well.