Skip to main content
Solved

Unable to use API login type with Resource Owner Password Credentials Flow

  • Nov 19, 2024 10:07 PM UTC
  • 7 replies
  • 242 views
  • Translate All
KurtBauer
Jr Varsity III
Forum|alt.badge.img

We want to provide access for customers to certain data via the API using the resource owner password credentials flow.  We can successfully login to get a token if the login type is UI or unrestricted, but we need to limit the user to API so they can’t login directly through the UI.  Is this possible?

Details

  1. The first screenshot shows the normal token request when the username has a login type of UI or unrestriced.
  2. The second screenshot we limit the user type to API only
  3. The third screenshot shows how the same Postman request from #1 now provides an error that only API requests are available for the user.

Is it not possible to lock the user account down to only allow API access but also get a token?

 

Best answer by Dmitrii Naumov

Hi ​@KurtBauer I’ve tried in 23r2 and searched the bug tracker.

This issue has already been reported and resolved in 24r2. Unfortunately, in earlier versions the bug indeed presents. 

View original

    7 replies

    Dmitrii Naumov
    Community Manager
    Forum|alt.badge.img+7

    ​@KurtBauer looks like a bug to me. 

    We’ll check and report to engineering if it is.

    Translate
      KurtBauer
      Jr Varsity III
      Forum|alt.badge.img
      • KurtBauer
      • Author
      • Jr Varsity III
      • Nov 26, 2024 3:43 PM UTC

      ​@Dmitrii Naumov were you able to determine if my post above is a bug?  I’d like to let the client know.

      Thanks

      Translate
      Dmitrii Naumov
      Community Manager
      Forum|alt.badge.img+7

      ​@KurtBauer we need more time to verify that.

      Translate
        KurtBauer
        Jr Varsity III
        Forum|alt.badge.img
        • KurtBauer
        • Author
        • Jr Varsity III
        • Dec 10, 2024 3:58 PM UTC

        ​@Dmitrii Naumov Are there any updates if this is a bug or should I open a case?  

        Translate
        Dmitrii Naumov
        Community Manager
        Forum|alt.badge.img+7

        ​@KurtBauer what version do you have? 

        We’ve checked on our side and it seems to work fine with the scenario you’ve described.

        Translate
          KurtBauer
          Jr Varsity III
          Forum|alt.badge.img
          • KurtBauer
          • Author
          • Jr Varsity III
          • Dec 11, 2024 10:23 PM UTC

          The site is on 23.211.0017

          Translate
          Dmitrii Naumov
          Community Manager
          Forum|alt.badge.img+7
          • Dmitrii Naumov
          • Community Manager
          • Answer
          • Dec 13, 2024 4:49 PM UTC

          Hi ​@KurtBauer I’ve tried in 23r2 and searched the bug tracker.

          This issue has already been reported and resolved in 24r2. Unfortunately, in earlier versions the bug indeed presents. 

          Translate
            Terms & ConditionsAccessibility statement
            About Acumatica ERP system
            Acumatica Cloud ERP provides the best business management solution for transforming your company to thrive in the new digital economy. Built on a future-proof platform with open architecture for rapid integrations, scalability, and ease of use, Acumatica delivers unparalleled value to small and midmarket organizations. Connected Business. Delivered.
            © 2008 — 2024  Acumatica, Inc. All rights reserved