Where can I find all registered clients\applications for REST API?

[Ullsokk]

Where can I find an overview of all registered applications\clients from the VIYA REST API?

I have registered at least one client, and possibly some duplicates. But I cannot find any overview of registered clients in either SAS VIYA Environment manager or in the API documentation. Where are the clients stored?

[joeFurbee]

Hi @Ullsokk,

Here is the REST call that returns all registered clients/applications:

curl -X GET https://mysasserver.sas.com/SASLogon/oauth/clients

If you'd like to get a specific client, add the clientid to the call:

curl -X GET https://mysasserver.sas.com/SASLogon/oauth/clients/sas.myapp

And finally, if you'd like to delete a client use the delete method:

curl -X DELETE https://mysasserver.sas.com/SASLogon/oauth/clients/sas.myapp

Here is a blog post I wrote on authentication with Viya for more details:

https://blogs.sas.com/content/sgf/2019/01/25/authentication-to-sas-viya/ 

Thanks,

Joe

[Ullsokk]

Thanks! Very familiar with the article, I have been using it a lot. 

Is this particular API documented somewhere? I can't find any official documentation regarding this particular GET request. A link would be much appreciated if you have one

[BrunoMueller]

You will find the doc here: https://developer.sas.com/apis/rest/v3.5/CoreServices/#return-collection-of-clients

[Ullsokk]

Tried getting a list of all applications, but got an error message;

"error":"insufficient_scope","error_description":"Insufficient scope for this resource","scope":"uaa.admin clients.read clients.adm
in sasapp zones.uaa.admin

Do I need to register a new client\app with an admin scope, to retrieve the list of registered applications?

[joeFurbee]

Hi @Ullsokk,

I apologize that I did not see the follow up question/issue you posed on this thread. 

Try registering the client by adding the "clients.read" scope. I'm checking for certain, but the "openid" scope may be lacking rights to view registered clients list.

As an FYI, there are other scopes: clients.write, clients.admin, and clients.secrect, which I'm assuming adds additional rights.

Thanks,

Joe