Token generation via OIDC Agent

Project Environments
1

Hi,

My name is João and I am having troubles understanding how to create a token following the procedure mentioned here: Using the APEx Single Sign-On – APEx - Documentation Portal
It is related with the project EO4SEM and the goal is to create a token that can be used to populate the Product Catalogue enviornment
I would like to authenticate via oidc-agent using the device flow in order to access the EO4SEM Product Catalogue API programmatically.
The example command provided in the link above is:
oidc-gen --pub apex_project_a --flow=device --client-id=project-a-catalogue-dev-api --iss=https://auth.apex.esa.int/realms/apex --scope=openid --redirect-url=“”

I would like to know where I can find the following information:

  • The client ID (and secret, if needed) for EO4SEM API access
  • The correct OIDC issuer URL and scopes
  • Any project-specific configuration for oidc-agent setup

Cheers,
João

2

Hi João,

Thank you for reaching out with your question! In the case of the EO4SEM project, you would need to replace the project-a with eo4sem, although I noticed that there is typo in the documentation. However, the following command should be working:

oidc-gen --pub apex_eo4sem --flow=device --client-id=eo4sem-catalogue-prod --iss=https://auth.apex.esa.int/realms/apex --scope=openid --redirect-url=""
3

Thanks Bram,
Your answer solved the issue.

1 Like