Scripted REST API Authentication with Username and Password in the body

[Michael Culhan1]

I'm working on an inbound integration where the external system posts a REST message to a SN Scripted REST API with the username and password in the body of the message (instead of the header).  Is there any way to get this to authenticate ?  I tried using the API Key and HMAC Authentication plugin, but this seems to only support authentication parameters in the url and headers.  

[Swapna Abburi]

Hi @Michael Culhan1 

Did you try Oauth2.0 authentication method with grant type as "Resource Owner Password Credentials"? this method allows user name and password in body of the message and generates access token.

[Michael Culhan1]

The third party is posting me with the username and password in the body and then I have to respond with a JWT.  I'm using sn_auth.GlideJWTAPI() to generate the JWT, but this API will not run as guest, hence the need to authenticate with the username and password sent in the body.