wso2 访问令牌验证 API 来自 POSTMAN 的调用失败

Question

I found that we can make this call

curl -k -u admin:admin -H 'Content-Type: application/x-www-form-urlencoded' -X POST --data 'token=fbc4e794-23db-3394-b1e5-f2c3e511d01f' https://localhost:9443/oauth2/introspect

to check the validity of an access token

This works perfectly as a curl command, but when i import this into postman and make calls,it fails

it doesnt work from nodejs code also

var axios = require('axios');
var qs = require('qs');
var data = qs.stringify({
  'token': 'ff744c77-53a6-46f2-ae4c-1da72cab52ab' 
});
var config = {
  method: 'post',
  url: 'https://localhost:9443/oauth2/introspect',
  headers: { 
    'Content-Type': 'application/x-www-form-urlencoded', 
    'Authorization': 'Basic YWRtaW46YWRtaW4='
  },
  data : data
};

axios(config)
.then(function (response) {
  console.log(JSON.stringify(response.data));
})
.catch(function (error) {
  console.log(error);
});

Answer 1

If you get an error as follows while running this nodejs code:

{ Error: unable to verify the first certificate
    at TLSSocket.onConnectSecure (_tls_wrap.js:1058:34)
    at TLSSocket.emit (events.js:198:13)
    at TLSSocket._finishInit (_tls_wrap.js:636:8)
  code: 'UNABLE_TO_VERIFY_LEAF_SIGNATURE',
.
.
.
}

Update the nodejs code as follows:

var axios = require('axios');
var https = require('https');
var qs = require('qs');
var data = qs.stringify({
  'token': 'ff744c77-53a6-46f2-ae4c-1da72cab52ab' 
});
var config = {
  method: 'post',
  url: 'https://localhost:9443/oauth2/introspect',
  headers: { 
    'Content-Type': 'application/x-www-form-urlencoded', 
    'Authorization': 'Basic YWRtaW46YWRtaW4='
  },
  data : data,
  httpsAgent: new https.Agent({
        rejectUnauthorized: false
    })
};

axios(config)
.then(function (response) {
  console.log(JSON.stringify(response.data));
})
.catch(function (error) {
  console.log(error);
});

It should return false/true (depending on the access token) as follows:

{
    "active": false
}

Answer 2

Can you try importing the following curl to postman

curl --location --request POST 'https://localhost:9443/oauth2/introspect' \
--header 'Authorization: Basic YWRtaW46YWRtaW4=' \
--header 'Content-Type: application/x-www-form-urlencoded' \
--data-urlencode 'token=ff744c77-53a6-46f2-ae4c-1da72cab52ab'