Your achievements

Level 1

0% to

Level 2

Tip /
Sign in

Sign in to Community

to gain points, level up, and earn exciting badges like the new
BedrockMission!

Learn More

View all

Sign in to view all badges

What are MetaScopes and how can I find what I need to add?

Avatar

Avatar
Validate 1
Level 1
oliverf82757722
Level 1

Likes

0 likes

Total Posts

28 posts

Correct Reply

0 solutions
Top badges earned
Validate 1
Applaud 5
View profile

Avatar
Validate 1
Level 1
oliverf82757722
Level 1

Likes

0 likes

Total Posts

28 posts

Correct Reply

0 solutions
Top badges earned
Validate 1
Applaud 5
View profile
oliverf82757722
Level 1

25-09-2020

I have been using this example using `@adobe/jwt-auth` to try and authenticate my external service to invoke my Project Firefly app.

My config is like...

 

export default {
  credentials: {
    clientId : 'client id',
    technicalAccountId : 'account id',
    orgId : 'org',
    clientSecret : 'secret',
    metaScopes : 'ent_user_sdk', // This comes from the example
    privateKey : '-----BEGIN PRIVATE KEY-----\n' +
      'My Private Key/n' +
      '-----END PRIVATE KEY-----\n',
  },
};

 

When I try to auth now I get the error...
The metascopes in the JWT are not a subset of the metascopes in the binding
I'm not actually sure what a metascope is and how I can find which metascopes are valid.
Thanks
Oliver
View Entire Topic

Avatar

Avatar
Give Back 25
Employee
duypnguyen
Employee

Likes

36 likes

Total Posts

173 posts

Correct Reply

32 solutions
Top badges earned
Give Back 25
Boost 25
Applaud 5
Give Back 5
Give Back 3
View profile

Avatar
Give Back 25
Employee
duypnguyen
Employee

Likes

36 likes

Total Posts

173 posts

Correct Reply

32 solutions
Top badges earned
Give Back 25
Boost 25
Applaud 5
Give Back 5
Give Back 3
View profile
duypnguyen
Employee

25-09-2020

Hi @oliverf82757722 - for JWT token handling, we recommend to use @adobe/aio-lib-ims which is supported by Project Firefly. As a side note, regardless of the JWT library being used, it's important that your action in that case should not be exposed as a web action, which makes it accessible to the public.

W.r.t. meta scopes, you should put them in an array, e.g. `metaScopes : ['ent_user_sdk']`.