Hallo,
we have a scripted rest api, that accepts incoming post requests.
At the moment we are using basic authentication. We create user profile with "Web service access only" set to true.
But there is a new policy from our customer, that prevents using basic auth. Activating OAuth on the instance is not a big deal. I already get a token requesting the oauth_token.do endpoint.
But how to configure scripted rest api to only allow requests with valid oauth token? How to prevent our rest api consumers from sending request with basic auth?
And second question. When I create a new "Create an OAuth API endpoint for external clients", grant type is using passwort credentials. So I need to set my servicenow user as well beside the OAuth clientId and secret. How to configure "Client Credentials" so I only need clientId and secret?
Best regards,
