Connections

Connections allow you to configure and manage integrations with external services. Here you can create and manage Client Connections for secure authentication in HTTP requests.

Prerequisites

Before creating connections, ensure you have the following permissions:

• list:Connection
• view:Connection
• edit:Connection
• delete:Connection
• create:Connection

Client Connections

A Client Connection stores the details required to obtain an access token from an OAuth2 or OpenID Connect authorization server. This is helpful when you may have multiple endpoints or tasks that need to authenticate with the same external service and allows you to centralize and manage these credentials in one place.

Creating a Client Connection

To add a new Client Connection:

1. Go to the Connections section in AireGlu.
2. Click the Add button.
3. Fill in the required fields:
   • Key: A unique identifier for this connection (e.g., my-client).
   • Display Name: A friendly name for easy reference.
   • Client ID: The client identifier registered with your authorization server.
   • Access Token URL: The token endpoint URL provided by your authorization server.
4. Under Secret Configuration, choose how to provide the client secret:
   • Client Secret: Reference an AireGlu secret that contains the client secret value.
   • Private Key JWT: Reference an AireGlu secret that contains a private key for JWT-based client authentication, and specify the key ID, formats, and signing algorithm as needed.
5. (Optional) Add any additional parameters required by your authorization server (e.g., scope).
6. Click Save connection.

Using a Client Connection in HTTP Request Tasks

Once you have created a Client Connection, you can use it to authenticate HTTP requests in your endpoint tasks:

1. In your endpoint, add or edit an HTTP Request Task.
2. Go to the Authorisation tab.
3. Set Auth Type to Client Connection.
4. Search and select the desired Client Connection.
5. (Optional) Override any parameters (such as scope) for this specific request.

When the task runs, AireGlu will automatically:

• Request an access token using the configured client connection.
• Inject the resulting bearer token into the HTTP request's Authorization header.
• Handle token caching and retries as needed, so you don't have to worry about token management in your endpoint.
• In the event of an authentication failure, the task will log the error details in the metrics under the "Usage Data" tab, allowing you to troubleshoot issues with token retrieval or authentication.

This makes it easy to securely call external APIs that require OAuth2 or OpenID Connect authentication, without manually handling tokens in your workflow.