Question
Incessant Technologies PVT Ltd
GB
Last activity: 5 Aug 2021 5:54 EDT
JWT Claims Inbound Mapping
We have a requirement to validate the JWT token generated by External System in Pega, to implement this we have configured below rules.
- Created the token profile.
- Created the Custom Activity which is calling pxProcessJWT for JWT validation. Token profile and the JWT token is being passed as parameters to pxProcessJWT.
- Configured the Custom Claims mapping.
Token validation is working fine but we are facing issue with claim mapping where the array(from JWT payload) is not being mapped to clipboard property. We tried mapping valuelist and Pagelist but nothing is getting mapped.
Also the JWT payload is not getting mapped
Appreciate any suggestion on this. Thanks.
Maantic
IN
@VjayaKumar_Coforge - If it is an array then it is difficult to map it using the token profile. Another approach will be to pass a property reference in the Param.payloadJSONLocation while calling pxProcessJWT. Once JWT is processed the referenced property will contain the JSON string which can then be parsed using DT or function
Incessant Technologies PVT Ltd
GB
@KALINGAROUT - Thanks for your quick reply,
I tried the approach you mentioned , which is not working (Logged the referenced payload property after pxProcessJWT execution which is showing empty.
Maantic
IN
@VjayaKumar_Coforge - Is roles a single value property? If not can you try a single value property like .pyNote and verify once.
Incessant Technologies PVT Ltd
GB
@KALINGAROUT- Roles is a text field. Thanks.
Maantic
IN
@VjayaKumar_Coforge - Is it possible to share a sample JWT token?
Incessant Technologies PVT Ltd
GB
@KALINGAROUT - Please find the attached masked payload
Maantic
IN
@VjayaKumar_Coforge - Can you send me the jwt token so that I can check whether I am able to get the payload or not.
Updated: 5 Aug 2021 5:54 EDT
Incessant Technologies PVT Ltd
GB
@KALINGAROUT - we can use the below engine api which is an alternative to pxProcessJWT activity. processJSONWebTokenAndGetPayload function validates the token and then returns the payload attributes in the form of Map. Below is the code snippet for the JWT validation and the fetching the attributes from the token payload.
jwtPayLoadAttributes = ((PegaAPI)tools).getJWTUtils().processJSONWebTokenAndGetPayload(requestAuthorizationHeader,tokenProfile); myStepPage.putString("pyStatusMessage","Sucess"); if(jwtPayLoadAttributes!= null){ net.minidev.json.JSONArray jArray=(net.minidev.json.JSONArray)jwtPayLoadAttributes.get("roles"); Roles = jArray.toString(); //oLog.debug("Roles Attribute -- :"+Roles); }
I have attached the dummy jwt token for your testing.