Question about client_credentials

[MaheshVelankar]

This is not an issue but a question.

I understand that with net/http and clientcredentials we can get data from any endpoint that requires Oauth2 access token. It "internally" arranges for refresh of token and getting the data with that fresh token.

Can we do such thing with resty?
and can we do such thing with resty ... along with specifying CA certificate?

Please excuse me ........I am not very deep on ssl part
Please let me know if there is such usage anywhere.
Thanks

[jeevatkm]

@MaheshVelankar

I understand that with net/http and clientcredentials we can get data from any endpoint that requires Oauth2 access token. It "internally" arranges for refresh of token and getting the data with that fresh token.

Is your question about how to use this https://pkg.go.dev/golang.org/x/oauth2/clientcredentials package with Resty?

and can we do such thing with resty ... along with specifying CA certificate?

To add CA certs (root or client root), you could use these methods.

• Client.SetRootCertificate
• Client.SetRootCertificateFromString
• Client.SetClientRootCertificate
• Client.SetClientRootCertificateFromString

---

Also, explore godoc to know more about Resty - https://pkg.go.dev/github.com/go-resty/resty/v2 and README.md file.

[MaheshVelankar]

Is your question about how to use this https://pkg.go.dev/golang.org/x/oauth2/clientcredentials package with Resty?

Yes. With this package we can set grant_type, client_id, client_secret and token url in the client config and the package takes care of obtaining new or refreshing old token and get the data too ..........without us getting the token and setting it on the request header.
Is such a thing possible with resty? If yes pl point me to some example usage.

Moreover I want to use the above with setting the CA cert ......... So please see if you have any example that does these two things

To add CA certs (root or client root), you could use these methods.

Yes I have read about those methods in your documentation

I hope I answered your question

[jeevatkm]

Using clientcredentials package in the Resty is simple.

clientCredCfg := &Config{ /* values ... */ }
client := resty.NewWithClient(clientCredCfg.Client(context.Background()))

// start using resty client ...

However, there is a catch in the next part of the question. i.e., using CA Cert. As per the GoDoc of clientcredentials#Config.Client

The returned Client and its Transport should not be modified.

So this is no-go route for your use case.

---

I would suggest using the following approach.

Example using Resty v2.16.2

clientCredCfg := &clientcredentials.Config{ /* values ... */ }

client := resty.New()

// add custom auth request middleware
client.OnBeforeRequest(func(c *resty.Client, req *resty.Request) error {
    // get the token from client credentials
    token, err := clientCredCfg.Token(req.Context())
    if err != nil {
        return err
    }

    // set it on the request
    req.SetAuthScheme(token.Type()).
        SetAuthToken(token.AccessToken)

    return nil
})

// Set the root CA certs using the methods mentioned in the previous comment.

// start using resty client

The above code snippet shows a similar behavior of setting a valid token on each request.

[jeevatkm]

@MaheshVelankar, FYI, I update the answer.