Hi Marcos,

As Daryl suggested, please share some screenshots of the Postman call that works for you showing the URL, headers and body.

In the meantime, please make sure that you have set the HTTP request header in your PB code to the same as that in your Postaman test.

You can also download a tool like Fiddler to monitor all data it sends and receives to find the differences between the data sent between Postman and PB HTTPClient object, which could help you resolve the issue.

Regards,

Hi Marcos;

Why don't you try with the RESTClient object and use SetJwtToken function to set the token string to the HTTP request header.

Here an example.

Alex.

String ls_P028_JWTToken
Integer li_P028_GetJWTTokenReturn
RestClient lrc_P028
lrc_P028 = Create RestClient

lrc_P028.SetRequestHeaders( "Content-Type:application/json;charset=UTF-8~r~nAccept-Encoding:gzip" ) //Sets the request header
//Gets the JWT token. The second parameter provides the value according to the token server request.
li_P028_GetJWTTokenReturn=lrc_P028.GetJWTToken("https://demo.appeon.com/pb/jwt/HSExample/api/values/GetToken", '{"Username":"user1","Password":"password1"}', ls_P028_JWTToken)

If li_P028_GetJWTTokenReturn = 1 Then
 //Sets the JWT token
 lrc_P028.SetJwtToken( ls_P028_JWTToken)
 //Retrieves data for dw_Data
 lrc_P028.retrieve( dw_Data, "https://demo.appeon.com/pb/jwt/HSExample/api/department/retrieve")
Else
 //Prints the GetJWTToken error message if any
End If

Hi Alex,

Thanks for replying. I just tried, but the return code is the same: 403 - Forbidden.

Regards.

Marcos

Hi Marcos,

Have you got screenshots of the Postman call that works for you showing the URL, headers and body?  Maybe something will stand out if we can see that.

Hi Mark Lee and Daryl Foster.

The screenshots and TXT file with the request/response headers.  I'm not able to understand the difference between them because they are completely different. Also, HTTP is not my strong point.

The screenshot of fiddler of Powerbuilder request:

and the screenshot of Postman request:

I just tried to consume the API via Postman (web browser) from another computer and it didn't work. So, the Postmand asked me to use Postman Desktop Agent, as the image shows and after agent installation it is working fine. It seems that the Postman needs to use some additional resource for consuming that API.

I just tried to consume the API via Postman (web browser) from another computer and it didn't work. So, the Postmand asked me to use Postman Desktop Agent, as the image shows and after agent installation it is working fine. It seems that the Postman needs to use some additional resource for consuming that API.

Hi Marcos, can you also post screen shots of your Postman request that generated that Fiddler output showing the Body, Headers and Authorization tabs?

From those Fiddler screen shots it looks like postman is calling a different URL (/v1/request) while Powerbuilder is calling /oauth/token/.  So I’m interested in seeing what you have entered in Postman to generate that request.

Hi Daryl,

Thanks for replying.

The screenshots as you said:

The Postman Headers:

The Postman Authorization

The Postman Body

Hi Marcos,

I referred to the information you provided and got the same test results as Daryld’s in PostMan and PowerBuilder.

If you are sure that your PostMan settings are the same as mine, but you can pass the test, you can try the PB code I provide to verify if it still returns a 403 error?

PB Code

// Code

string json, base64, url_api

Integer li_SendReturn

long lr_code

json = '{"grant_type":"client_credentials", "role":"software_house"}'

//base64 = 'dXN1YXJpb3Rlc3RlOnNlbmhhdGVzdGU'
base64 ='bwFyY29zQHNvZnRjb25pbmZvcm1hdGljYS5jb20uYnI6UzBmdGMwbi4xOTk3'

url_api = 'https://pix.tecnospeed.com.br/oauth2/token'
//url_api = 'https://pix.tecnospeed.com.br/v1/request'

HttpClient http
http = Create HttpClient

// Headers

http.SetRequestHeader("Content-Type", "application/json" )
http.SetRequestHeader("Accept-Encoding", "gzip,deflate,br")
http.SetRequestHeader("Connection", "keep-alive")
http.SetRequestHeader("Authorization", "Basic " + base64)
http.SetRequestHeader("cache-control", "no-cache")
//http.SetRequestHeader("Content-Length", string(len(json)))
//

li_SendReturn = http.sendrequest('POST', url_api, json)

If http.GetResponseStatusCode() <> 200 Then
	MessageBox('','Error: '+string(http.GetResponseStatusCode())+' - '+http.GetResponseStatusText())
end if

/// End

Also, from those Fiddler screenshots, it looks like postman is calling a different URL (/v1/request) while Powerbuilder is calling /oauth/token/.

I guess your API request address may be different. Can you provide the Host address shown on the left side of the screenshot of the Fiddler? Is it https://pix.tecnospeed.com.br?

Regards,

Hi Mark,

I tried your code and the result is the same: error 403 - Forbidden.

Regarding the Postman URL different, I don't have any idea why it changes the URL since I have entered the https://pix.tecnospeed.com.br in its URL address, as you can see on images I've sent before. Maybe the Postman Agent "force" other URL/route to avoid possible erros related to CORS policy.

Attached, the image of fiddler register with APIs request using your suggested code.

I've talked with APIs vendor today and he said that is possible to see on his monitoring application that request method is sending as "OPTIONS" and not as "POST" as we are have entered (li_SendReturn = http.sendrequest('POST', url_api, json)). Could be a bug? Sincerelly I don't beleave that is a bug, but after a lot of hours looking for a solution, I need to include it as a option.

Regards.

Marcos

Hi Marcos,

Glad to hear that you got it resolved and thanks for sharing the solution!
PB does support concatenating a variable as used in the authorization header.
Please make sure the variable identificacao is the same as "Basic "+base64.

My verification with the following basic authentication code works fine.

String                    ls_Basic, ls_UserName, ls_Password, ls_Body
Integer         li_Return
CoderObject      lco_Code
HttpClient           lhc_Client
 
lco_Code = Create CoderObject
lhc_Client = Create HttpClient
 
ls_UserName = "guest"
ls_Password = "guest"
ls_Basic = lco_code.base64encode( Blob(ls_UserName + ":" + ls_Password , EncodingUTF8!))
 
lhc_Client.SetRequestHeader( "Authorization", "Basic " + ls_Basic)
li_Return = lhc_Client.SendRequest("GET", "https://jigsaw.w3.org/HTTP/Basic/")
If li_Return = 1 And lhc_Client.GetResponseStatusCode() = 200 Then
                lhc_Client.GetResponseBody(ls_Body)
                MessageBox ("Tips" ,ls_Body )
End If
 
Destroy ( lco_Code )
Destroy ( lhc_Client )