api1 | Versioned API example | REST library

I am starting to develop with Node JS and I am creating an application to achieve the following:

Download a CSV with the JSON information found in an API. I have an internal file that contains the url where the JSON is located, I need to extract the information from that url and download it in CSV. I am using the json-2-csv, node-fetch and fs modules.

My problem: I cannot access the information contained in the JSON to download it

This is my controller:

I have a .net core MVC application, below are my queries

TargetFramework --> "net5.0"

IdentityModel Version--> "5.1.0"

Q1) In which I uses ValidAudiences which is not working. If I use ValidAudience token validation is working fine

I have doubt on Identity Resource user claims

I have configured as below Scenario-1

identity resource ("family") --> user claims as [ "kid1", "kid2", "wife"]

Q1: as per the documentation "List of associated user claim types that should be included in the identity token." But I cant see this in identity token?

Scenario-2

IS configuration

identity resource ("family" ) --> user claims [ "kid1", "kid2", "wife"]

API Scope (api1) --> user claims ["role"] API Scope (api2) --> user claims ["country", "address"]

API Resource (TestAPI2Test) --> API Scopes [ "api1", "api2"] AND user claims ["role", "wife"] API Resource (TestAPI1) --> API Scopes [ "api1", "api2"] AND user claims ["role", "siblings", "wife"] API Resource (testResource) --> API Scopes [ "api2"] AND user claims ["role", "siblings", "kid1", "name" ]

Angular Client Configuration requested scopes: [openid profile api1 offline_access family]

access_token

I am using NestJs with oidc passport strategy with identityserver as following.

My setup:

API Gateway - 10 APis (api1, api2,...), all mapped to one custom domain name (api.xxx.com)

Route53 - api.xxx.com pointed to my Cloudfront distribution

Cloudfront - distribution created, api.xxx.com set as a CNAME

What I need to know - I would like to set Origin of this Cloudfront to the this custom domain name, so I can call APIs like api.xxx.com/api1/endpoint, api.xxx.com/api2/endpoint. But how? I used API Gateway Name of my api.xxx.com Custom Domain name (xxxxxxx.execute-api.us-east-1.amazonaws.com) for default behaviour Origin name and assumed that requests to all 10 APIs will be routed correctly, but it´s not happening,

What works: I created Origin name using the Invoke Url of api1 and assigned it to the Default behaviour. So now, when I call "https://api.xxx.com/endpoint", api1 gets called. That makes sense, but the problem is - I need the path to the API to be the part of the url, such as "https://api.xxx.com/api1/endpoint" so I can differentiate between them.

What doesnt work: But I need several APIs set in the distribution so I can call them like "https://api.xxx.com/api1/endpoint" and so on. And if I use Invoke URL as the Origin name for the API, I cannot attach this api name also to the URL, that returns 403. I was hoping that if I used "API Gateway domain name" of "Custom Domain Names" (after all, it has a format of xxxxx.execute-api.us-east-1.amazonaws.com), I could then use APIs in the URL, but that doesnt work. I cannot even use this "API Gateway domain name" to call individual apis through Postman. Could someone advice me how to do it? How can I configure Cloudfront so it can call various APIs and use their routes in url?

Here is my scenario:

I have a function that gives out json response when called for. Its inside a class that has the Signup.class.php included which has the Signup class. Where the GET param pass is being accessed inside the gen_hash() function as shown above. The code is below.

The code is live at https://api1.selfmade.ninja/api/gen_hash?pass=hellooo

I need to execute specific api only for dedicated users from CsvTestconfig file Test1 Test2 Test3 Test4 ... Test40

For example: API1 to be executed only by users (Test1, Test2, Test3, Test4) I have used below code in JMeter IF condition. but it is not working as expected. for single condition it works fine.

${__javaScript("${LOGINUSER}" == "Test1" || "${LOGINUSER}" == "Test2" || "${LOGINUSER}" == "Test3" || "${LOGINUSER}" == "Test4")}

API2 should be executed by all other users except users (Test20, Test22, Test30)

${__javaScript("${LOGINUSER}" != "Test20" || "${LOGINUSER}" != "Test22" || "${LOGINUSER}" != "Test30")}

Appreciate if anyone can help on this.

Thanks

I have a doubt on API securing with identity server4

IdentityResource

APIResource

APIScopes

In Startup.cs

I am currently developing an application using Asp.net core 5.0 and Identity server 4.My OIDC authentication flow handled by Microsoft.AspNetCore.Authentication.OpenIdConnect. I deployed my application into IIS and I am getting my login screen. But after login I got the Http 400 Bad request error.Error. I checked my application cookie it contains many AspNetCore.OpenIdConnect.Nonce cookies. I deleted the cookies but doesn't solve my issue. What is the proper solution to handle this solution. I tried this but doesn't help me. I will share the code below

MVC Startup.cs